./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec3_product01.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version f4b24e32 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec3_product01.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 2e63e44256bba8522bf99795cd1238c2e8ad8456659e8a545df838f8f88bd318 --- Real Ultimate output --- This is Ultimate 0.2.2-?-f4b24e3 [2022-07-14 15:48:42,795 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-14 15:48:42,797 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-14 15:48:42,825 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-14 15:48:42,825 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-14 15:48:42,826 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-14 15:48:42,827 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-14 15:48:42,829 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-14 15:48:42,830 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-14 15:48:42,831 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-14 15:48:42,832 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-14 15:48:42,833 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-14 15:48:42,833 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-14 15:48:42,834 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-14 15:48:42,835 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-14 15:48:42,836 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-14 15:48:42,836 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-14 15:48:42,837 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-14 15:48:42,839 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-14 15:48:42,840 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-14 15:48:42,842 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-14 15:48:42,843 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-14 15:48:42,843 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-14 15:48:42,845 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-14 15:48:42,845 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-14 15:48:42,848 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-14 15:48:42,848 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-14 15:48:42,849 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-14 15:48:42,849 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-14 15:48:42,850 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-14 15:48:42,851 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-14 15:48:42,851 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-14 15:48:42,852 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-14 15:48:42,852 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-14 15:48:42,853 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-14 15:48:42,854 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-14 15:48:42,854 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-14 15:48:42,855 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-14 15:48:42,855 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-14 15:48:42,856 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-14 15:48:42,856 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-14 15:48:42,860 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-14 15:48:42,862 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-07-14 15:48:42,894 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-14 15:48:42,903 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-14 15:48:42,904 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-14 15:48:42,904 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-14 15:48:42,905 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-14 15:48:42,905 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-14 15:48:42,906 INFO L138 SettingsManager]: * Use SBE=true [2022-07-14 15:48:42,906 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-07-14 15:48:42,906 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-07-14 15:48:42,907 INFO L138 SettingsManager]: * Use old map elimination=false [2022-07-14 15:48:42,907 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-07-14 15:48:42,907 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-07-14 15:48:42,908 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-07-14 15:48:42,908 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-14 15:48:42,908 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-14 15:48:42,908 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-07-14 15:48:42,908 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-14 15:48:42,909 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-14 15:48:42,909 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-14 15:48:42,909 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-07-14 15:48:42,909 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-07-14 15:48:42,909 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-07-14 15:48:42,910 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-14 15:48:42,910 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-14 15:48:42,910 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-07-14 15:48:42,910 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-14 15:48:42,910 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-07-14 15:48:42,911 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-14 15:48:42,911 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-14 15:48:42,911 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-14 15:48:42,911 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-14 15:48:42,912 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-07-14 15:48:42,912 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 2e63e44256bba8522bf99795cd1238c2e8ad8456659e8a545df838f8f88bd318 [2022-07-14 15:48:43,148 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-14 15:48:43,171 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-14 15:48:43,173 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-14 15:48:43,174 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-14 15:48:43,175 INFO L275 PluginConnector]: CDTParser initialized [2022-07-14 15:48:43,176 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec3_product01.cil.c [2022-07-14 15:48:43,243 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/c93593345/36a0cfff7d3c4a19aaceed1a850c33af/FLAG845b8c100 [2022-07-14 15:48:43,777 INFO L306 CDTParser]: Found 1 translation units. [2022-07-14 15:48:43,778 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec3_product01.cil.c [2022-07-14 15:48:43,797 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/c93593345/36a0cfff7d3c4a19aaceed1a850c33af/FLAG845b8c100 [2022-07-14 15:48:44,269 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/c93593345/36a0cfff7d3c4a19aaceed1a850c33af [2022-07-14 15:48:44,271 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-14 15:48:44,272 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-14 15:48:44,274 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-14 15:48:44,274 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-14 15:48:44,276 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-14 15:48:44,277 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.07 03:48:44" (1/1) ... [2022-07-14 15:48:44,278 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@374ba657 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:48:44, skipping insertion in model container [2022-07-14 15:48:44,279 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.07 03:48:44" (1/1) ... [2022-07-14 15:48:44,284 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-14 15:48:44,349 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-14 15:48:44,703 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec3_product01.cil.c[40412,40425] [2022-07-14 15:48:44,790 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-14 15:48:44,806 INFO L203 MainTranslator]: Completed pre-run [2022-07-14 15:48:44,854 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec3_product01.cil.c[40412,40425] [2022-07-14 15:48:44,878 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-14 15:48:44,898 INFO L208 MainTranslator]: Completed translation [2022-07-14 15:48:44,899 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:48:44 WrapperNode [2022-07-14 15:48:44,899 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-14 15:48:44,900 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-14 15:48:44,900 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-14 15:48:44,900 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-14 15:48:44,907 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:48:44" (1/1) ... [2022-07-14 15:48:44,930 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:48:44" (1/1) ... [2022-07-14 15:48:45,163 INFO L137 Inliner]: procedures = 86, calls = 334, calls flagged for inlining = 187, calls inlined = 553, statements flattened = 19287 [2022-07-14 15:48:45,163 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-14 15:48:45,165 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-14 15:48:45,165 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-14 15:48:45,165 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-14 15:48:45,172 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:48:44" (1/1) ... [2022-07-14 15:48:45,172 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:48:44" (1/1) ... [2022-07-14 15:48:45,216 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:48:44" (1/1) ... [2022-07-14 15:48:45,217 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:48:44" (1/1) ... [2022-07-14 15:48:45,376 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:48:44" (1/1) ... [2022-07-14 15:48:45,524 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:48:44" (1/1) ... [2022-07-14 15:48:45,550 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:48:44" (1/1) ... [2022-07-14 15:48:45,590 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-14 15:48:45,592 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-14 15:48:45,592 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-14 15:48:45,592 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-14 15:48:45,593 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:48:44" (1/1) ... [2022-07-14 15:48:45,600 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-14 15:48:45,609 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-14 15:48:45,641 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-14 15:48:45,643 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-07-14 15:48:45,672 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-14 15:48:45,673 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-14 15:48:45,673 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-14 15:48:45,673 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-14 15:48:45,875 INFO L234 CfgBuilder]: Building ICFG [2022-07-14 15:48:45,877 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-14 15:48:51,982 INFO L275 CfgBuilder]: Performing block encoding [2022-07-14 15:48:52,049 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-14 15:48:52,050 INFO L299 CfgBuilder]: Removed 1 assume(true) statements. [2022-07-14 15:48:52,059 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.07 03:48:52 BoogieIcfgContainer [2022-07-14 15:48:52,060 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-14 15:48:52,061 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-07-14 15:48:52,062 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-07-14 15:48:52,064 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-07-14 15:48:52,065 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-14 15:48:52,065 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 14.07 03:48:44" (1/3) ... [2022-07-14 15:48:52,067 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@76279781 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 14.07 03:48:52, skipping insertion in model container [2022-07-14 15:48:52,067 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-14 15:48:52,067 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.07 03:48:44" (2/3) ... [2022-07-14 15:48:52,067 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@76279781 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 14.07 03:48:52, skipping insertion in model container [2022-07-14 15:48:52,068 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-14 15:48:52,068 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.07 03:48:52" (3/3) ... [2022-07-14 15:48:52,069 INFO L354 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product01.cil.c [2022-07-14 15:48:52,184 INFO L255 stractBuchiCegarLoop]: Interprodecural is true [2022-07-14 15:48:52,184 INFO L256 stractBuchiCegarLoop]: Hoare is false [2022-07-14 15:48:52,184 INFO L257 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-07-14 15:48:52,185 INFO L258 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-07-14 15:48:52,185 INFO L259 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-07-14 15:48:52,185 INFO L260 stractBuchiCegarLoop]: Difference is false [2022-07-14 15:48:52,185 INFO L261 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-07-14 15:48:52,185 INFO L265 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-07-14 15:48:52,206 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5723 states, 5722 states have (on average 1.882209017825935) internal successors, (10770), 5722 states have internal predecessors, (10770), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:48:52,342 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1160 [2022-07-14 15:48:52,342 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:48:52,343 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:48:52,367 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:48:52,367 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:48:52,367 INFO L287 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-07-14 15:48:52,380 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5723 states, 5722 states have (on average 1.882209017825935) internal successors, (10770), 5722 states have internal predecessors, (10770), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:48:52,449 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1160 [2022-07-14 15:48:52,449 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:48:52,449 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:48:52,454 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:48:52,454 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:48:52,464 INFO L752 eck$LassoCheckResult]: Stem: 3518#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 5584#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 2959#L1866true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5051#L1859true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 301#L1874true main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 2058#L395true assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 2092#L368true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 916#L702true assume { :end_inline_initFloors } true; 5081#L1942true assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 2132#L454true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 3453#L479true bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 287#L980true assume 0 == initPersonOnFloor_~floor#1; 3002#L981true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 5640#L1088-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 3166#L772true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 440#L784-2true assume { :end_inline_callOnFloor } true; 1899#L1124true assume { :end_inline_initPersonOnFloor } true; 1739#L113true assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 98#L2102true __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 5660#L2154true __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 1070#L1315true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 5665#L1377true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 4714#L2119-5true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 5338#L2140-5true __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 2710#L1381true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 393#L1421true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 3682#L709true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 3037#L736true stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 988#L2715true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1754#L2727true timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 2781#L2864true assume !(0 != timeShift_~tmp___9~3#1); 4026#L2955true assume !(1 == ~doorState~0); 2416#L2955-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1415#L2306true assume !(1 == stopRequestedInDirection_~dir#1); 4588#L2475true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1777#L2628true timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 4660#L2963true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 119#L2682true assume !(1 == ~currentHeading~0); 1610#L2692true assume !(0 == ~currentFloorID~0); 5586#L2692-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3670#L2698-1true assume { :end_inline_continueInDirection } true; 4860#L2972-2true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 3286#L1446true assume !(-1 == ~expectedDirection~0); 1546#L1458true assume !(1 == ~expectedDirection~0); 4280#L1459true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 407#L2987true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2028#L2102-1true __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 3084#L2154-3true __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 1549#L1315-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 313#L1316-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1569#L2119-11true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1884#L2140-11true __utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 544#L1320-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 891#L1421-1true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 4625#L709-21true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 444#L736-21true stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 2667#L2715-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1457#L2727-1true timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 5039#L2864-2true assume !(0 != timeShift_~tmp___9~3#1); 5300#L2955-3true assume !(1 == ~doorState~0); 1611#L2955-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 665#L2306-2true assume !(1 == stopRequestedInDirection_~dir#1); 743#L2475-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 413#L2628-2true timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 5303#L2963-2true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 3770#L2682-3true assume !(1 == ~currentHeading~0); 2159#L2692-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 480#L2692-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 855#L2698-7true assume { :end_inline_continueInDirection } true; 2233#L2972-5true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 3548#L1446-1true assume !(-1 == ~expectedDirection~0); 3813#L1458-1true assume !(1 == ~expectedDirection~0); 4945#L1459-1true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 2036#L2987-1true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1805#L2102-2true __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1809#L2154-6true __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 171#L1315-2true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 5224#L1316-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 5607#L2119-22true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 2290#L2140-22true __utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 39#L1320-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 4011#L1421-2true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 2747#L709-42true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 4757#L736-42true stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 4466#L2715-2true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 270#L2727-2true timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 658#L2864-4true assume !(0 != timeShift_~tmp___9~3#1); 2962#L2955-6true assume !(1 == ~doorState~0); 3839#L2955-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1695#L2306-4true assume !(1 == stopRequestedInDirection_~dir#1); 326#L2475-4true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 815#L2628-4true timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1256#L2963-4true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 464#L2682-6true assume !(1 == ~currentHeading~0); 66#L2692-18true assume !(0 == ~currentFloorID~0); 1346#L2692-20true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 42#L2698-13true assume { :end_inline_continueInDirection } true; 843#L2972-8true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 5626#L1446-2true assume !(-1 == ~expectedDirection~0); 3194#L1458-2true assume !(1 == ~expectedDirection~0); 2270#L1459-2true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1386#L2987-2true assume { :end_inline_timeShift } true; 2584#L181true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1139#L454-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1519#L479-1true bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2723#L980-1true assume 0 == initPersonOnFloor_~floor#1; 3257#L981-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1111#L1088-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 3474#L772-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 769#L784-5true assume { :end_inline_callOnFloor } true; 4673#L1124-1true assume { :end_inline_initPersonOnFloor } true; 3551#L113-1true assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1069#L2102-3true __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1550#L2154-9true __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 268#L1315-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 3060#L1316-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1479#L2119-33true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 4153#L2140-33true __utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 4753#L1320-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 701#L1421-3true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1736#L709-63true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 4307#L736-63true stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 5215#L2715-3true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 5491#L2727-3true timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 928#L2864-6true assume !(0 != timeShift_~tmp___9~3#1); 534#L2955-9true assume !(1 == ~doorState~0); 2506#L2955-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 375#L2306-6true assume !(1 == stopRequestedInDirection_~dir#1); 2014#L2475-6true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 4091#L2628-6true timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 2196#L2963-6true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 1085#L2682-9true assume !(1 == ~currentHeading~0); 2112#L2692-27true assume !(0 == ~currentFloorID~0); 5149#L2692-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 43#L2698-19true assume { :end_inline_continueInDirection } true; 5024#L2972-11true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 4571#L1446-3true assume !(-1 == ~expectedDirection~0); 4156#L1458-3true assume !(1 == ~expectedDirection~0); 1223#L1459-3true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 4390#L2987-3true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 2734#L198-2true [2022-07-14 15:48:52,466 INFO L754 eck$LassoCheckResult]: Loop: 2734#L198-2true assume !false; 5234#L199true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 644#L202true assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 2659#L1973true cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 3575#L206true assume 1 != cleanup_~tmp___0~0#1; 2387#L206-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 4432#L709-84true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 2348#L736-84true anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 5643#L2210true assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 3747#L2274true isIdle_#t~ret67#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 5079#L2287true cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 931#L218true assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 3526#L2102-4true __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 248#L2154-12true __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 4849#L1315-4true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 4884#L1377-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 2757#L2119-49true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1303#L2140-49true __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 1529#L1381-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 108#L1421-4true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 4316#L709-89true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1955#L736-89true stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 418#L2715-4true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 2353#L2727-4true timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 947#L2864-8true assume !(0 != timeShift_~tmp___9~3#1); 4004#L2955-12true assume 1 == ~doorState~0;~doorState~0 := 0; 3993#L2955-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 3774#L2306-8true assume !(1 == stopRequestedInDirection_~dir#1); 623#L2475-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 575#L2628-8true timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 5233#L2963-8true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 5482#L2682-12true assume !(1 == ~currentHeading~0); 3087#L2692-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3717#L2692-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3445#L2698-25true assume { :end_inline_continueInDirection } true; 3655#L2972-14true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 2861#L1446-4true assume !(-1 == ~expectedDirection~0); 656#L1458-4true assume !(1 == ~expectedDirection~0); 3873#L1459-4true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 2698#L2987-4true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 2734#L198-2true [2022-07-14 15:48:52,472 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:48:52,473 INFO L85 PathProgramCache]: Analyzing trace with hash 510686431, now seen corresponding path program 1 times [2022-07-14 15:48:52,481 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:48:52,481 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1017476200] [2022-07-14 15:48:52,481 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:48:52,482 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:48:52,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:48:52,929 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:48:52,930 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:48:52,931 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1017476200] [2022-07-14 15:48:52,931 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1017476200] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:48:52,932 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:48:52,932 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:48:52,933 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1085309572] [2022-07-14 15:48:52,934 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:48:52,937 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:48:52,941 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:48:52,941 INFO L85 PathProgramCache]: Analyzing trace with hash -1972399755, now seen corresponding path program 1 times [2022-07-14 15:48:52,941 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:48:52,942 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1621273071] [2022-07-14 15:48:52,942 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:48:52,942 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:48:52,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:48:53,039 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:48:53,040 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:48:53,040 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1621273071] [2022-07-14 15:48:53,040 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1621273071] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:48:53,041 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:48:53,041 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-14 15:48:53,041 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [794757719] [2022-07-14 15:48:53,041 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:48:53,042 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:48:53,043 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:48:53,069 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-14 15:48:53,069 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-07-14 15:48:53,083 INFO L87 Difference]: Start difference. First operand has 5723 states, 5722 states have (on average 1.882209017825935) internal successors, (10770), 5722 states have internal predecessors, (10770), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 6 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:48:57,241 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:48:57,242 INFO L93 Difference]: Finished difference Result 14356 states and 26720 transitions. [2022-07-14 15:48:57,244 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-07-14 15:48:57,250 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14356 states and 26720 transitions. [2022-07-14 15:48:57,395 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3320 [2022-07-14 15:48:57,491 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14356 states to 14268 states and 26621 transitions. [2022-07-14 15:48:57,492 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14268 [2022-07-14 15:48:57,587 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14268 [2022-07-14 15:48:57,592 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14268 states and 26621 transitions. [2022-07-14 15:48:57,622 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:48:57,623 INFO L369 hiAutomatonCegarLoop]: Abstraction has 14268 states and 26621 transitions. [2022-07-14 15:48:57,650 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14268 states and 26621 transitions. [2022-07-14 15:48:57,823 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14268 to 9486. [2022-07-14 15:48:57,843 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9486 states, 9486 states have (on average 1.867910605102256) internal successors, (17719), 9485 states have internal predecessors, (17719), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:48:57,866 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9486 states to 9486 states and 17719 transitions. [2022-07-14 15:48:57,867 INFO L392 hiAutomatonCegarLoop]: Abstraction has 9486 states and 17719 transitions. [2022-07-14 15:48:57,867 INFO L374 stractBuchiCegarLoop]: Abstraction has 9486 states and 17719 transitions. [2022-07-14 15:48:57,867 INFO L287 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-07-14 15:48:57,867 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9486 states and 17719 transitions. [2022-07-14 15:48:57,917 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2125 [2022-07-14 15:48:57,917 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:48:57,918 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:48:57,920 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:48:57,921 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:48:57,921 INFO L752 eck$LassoCheckResult]: Stem: 25209#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 25210#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 24763#L1866 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 24764#L1859 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 20839#L1874 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 20840#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 23809#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 22053#L702 assume { :end_inline_initFloors } true; 22054#L1942 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 23898#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 22548#L479 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 20808#L980 assume 0 == initPersonOnFloor_~floor#1; 20809#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 20148#L1088-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 24941#L772 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 21141#L784-2 assume { :end_inline_callOnFloor } true; 21142#L1124 assume { :end_inline_initPersonOnFloor } true; 23375#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 20361#L2102 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 20362#L2154 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 22326#L1315 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 22327#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 25852#L2119-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 24668#L2140-5 __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 24520#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 21017#L1421 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 21041#L709 assume !(0 == isFloorCalling_~floorID#1); 22837#L713 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 20347#L736 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 22179#L2715 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 22180#L2727 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 23396#L2864 assume !(0 != timeShift_~tmp___9~3#1); 24586#L2955 assume !(1 == ~doorState~0); 24221#L2955-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 22878#L2306 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 22880#L1283 stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 25842#L2310 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 20166#L2628 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 23431#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 20412#L2682 assume !(1 == ~currentHeading~0); 20413#L2692 assume !(0 == ~currentFloorID~0); 23181#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 25320#L2698-1 assume { :end_inline_continueInDirection } true; 23187#L2972-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 25044#L1446 assume !(-1 == ~expectedDirection~0); 21456#L1458 assume !(1 == ~expectedDirection~0); 23074#L1459 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 21069#L2987 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 21070#L2102-1 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 23774#L2154-3 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 23081#L1315-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 20867#L1316-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 20868#L2119-11 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 23112#L2140-11 __utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 21361#L1320-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 21362#L1421-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 22012#L709-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 20746#L736-21 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 21148#L2715-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 22939#L2727-1 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 22940#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 25948#L2955-3 assume !(1 == ~doorState~0); 23182#L2955-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 21605#L2306-2 assume !(1 == stopRequestedInDirection_~dir#1); 21606#L2475-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 22700#L2628-2 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 29363#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 29364#L2682-3 assume !(1 == ~currentHeading~0); 29496#L2692-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 21228#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 21229#L2698-7 assume { :end_inline_continueInDirection } true; 20874#L2972-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 24018#L1446-1 assume !(-1 == ~expectedDirection~0); 25232#L1458-1 assume !(1 == ~expectedDirection~0); 25416#L1459-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 23781#L2987-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 23466#L2102-2 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 23467#L2154-6 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 20540#L1315-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 20541#L1316-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 25987#L2119-22 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 23909#L2140-22 __utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 20207#L1320-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 20208#L1421-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 26876#L709-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 20461#L736-42 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 25746#L2715-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 20770#L2727-2 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 20771#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 21590#L2955-6 assume !(1 == ~doorState~0); 24768#L2955-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 23308#L2306-4 assume !(1 == stopRequestedInDirection_~dir#1); 23309#L2475-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 29318#L2628-4 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 29316#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 29317#L2682-6 assume !(1 == ~currentHeading~0); 29493#L2692-18 assume !(0 == ~currentFloorID~0); 20279#L2692-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 20216#L2698-13 assume { :end_inline_continueInDirection } true; 20217#L2972-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 21930#L1446-2 assume !(-1 == ~expectedDirection~0); 20981#L1458-2 assume !(1 == ~expectedDirection~0); 21015#L1459-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 22832#L2987-2 assume { :end_inline_timeShift } true; 22833#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 22437#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 22438#L479-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 23033#L980-1 assume 0 == initPersonOnFloor_~floor#1; 24532#L981-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 20794#L1088-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 22387#L772-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 20421#L784-5 assume { :end_inline_callOnFloor } true; 21798#L1124-1 assume { :end_inline_initPersonOnFloor } true; 25234#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 22324#L2102-3 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 22325#L2154-9 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 20766#L1315-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 20767#L1316-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 22973#L2119-33 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 22186#L2140-33 __utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 25592#L1320-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 20736#L1421-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 21674#L709-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 21075#L736-63 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 25673#L2715-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 25544#L2727-3 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 22078#L2864-6 assume !(0 != timeShift_~tmp___9~3#1); 21341#L2955-9 assume !(1 == ~doorState~0); 21342#L2955-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 20997#L2306-6 assume !(1 == stopRequestedInDirection_~dir#1); 20998#L2475-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 21791#L2628-6 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 23971#L2963-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 23973#L2682-9 assume !(1 == ~currentHeading~0); 29558#L2692-27 assume !(0 == ~currentFloorID~0); 23874#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 20218#L2698-19 assume { :end_inline_continueInDirection } true; 20219#L2972-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 25790#L1446-3 assume !(-1 == ~expectedDirection~0); 21794#L1458-3 assume !(1 == ~expectedDirection~0); 22568#L1459-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 22569#L2987-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 24511#L198-2 [2022-07-14 15:48:57,922 INFO L754 eck$LassoCheckResult]: Loop: 24511#L198-2 assume !false; 24544#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 21565#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 21566#L1973 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 24460#L206 assume 1 != cleanup_~tmp___0~0#1; 24187#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 24188#L709-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 20172#L736-84 anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 24147#L2210 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 22683#L2274 isIdle_#t~ret67#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 25372#L2287 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 22085#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 22086#L2102-4 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 20722#L2154-12 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 20723#L1315-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 25896#L1316-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 25903#L2119-44 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 29306#L2140-44 __utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 24882#L1320-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 20177#L1421-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 20385#L709-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 21830#L736-89 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 21092#L2715-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 20516#L2727-4 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 22111#L2864-8 assume !(0 != timeShift_~tmp___9~3#1); 22112#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 25521#L2955-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 25393#L2306-8 assume !(1 == stopRequestedInDirection_~dir#1); 25394#L2475-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 29451#L2628-8 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 29448#L2963-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 29449#L2682-12 assume !(1 == ~currentHeading~0); 29492#L2692-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 22728#L2692-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 25153#L2698-25 assume { :end_inline_continueInDirection } true; 20641#L2972-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 24665#L1446-4 assume !(-1 == ~expectedDirection~0); 21587#L1458-4 assume !(1 == ~expectedDirection~0); 21360#L1459-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 24510#L2987-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 24511#L198-2 [2022-07-14 15:48:57,923 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:48:57,923 INFO L85 PathProgramCache]: Analyzing trace with hash -962285709, now seen corresponding path program 1 times [2022-07-14 15:48:57,923 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:48:57,923 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [351825587] [2022-07-14 15:48:57,924 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:48:57,924 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:48:57,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:48:58,001 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:48:58,001 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:48:58,002 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [351825587] [2022-07-14 15:48:58,002 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [351825587] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:48:58,002 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:48:58,002 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:48:58,002 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [624025879] [2022-07-14 15:48:58,003 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:48:58,003 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:48:58,003 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:48:58,004 INFO L85 PathProgramCache]: Analyzing trace with hash -624895014, now seen corresponding path program 1 times [2022-07-14 15:48:58,004 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:48:58,004 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1263806784] [2022-07-14 15:48:58,004 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:48:58,004 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:48:58,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:48:58,068 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:48:58,069 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:48:58,070 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1263806784] [2022-07-14 15:48:58,070 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1263806784] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:48:58,070 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:48:58,070 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-14 15:48:58,071 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [849384075] [2022-07-14 15:48:58,071 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:48:58,071 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:48:58,071 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:48:58,072 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-14 15:48:58,072 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-07-14 15:48:58,072 INFO L87 Difference]: Start difference. First operand 9486 states and 17719 transitions. cyclomatic complexity: 8234 Second operand has 8 states, 8 states have (on average 5.0) internal successors, (40), 8 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:02,585 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:49:02,585 INFO L93 Difference]: Finished difference Result 22474 states and 41876 transitions. [2022-07-14 15:49:02,585 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-07-14 15:49:02,586 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 22474 states and 41876 transitions. [2022-07-14 15:49:02,680 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5410 [2022-07-14 15:49:02,766 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 22474 states to 22474 states and 41876 transitions. [2022-07-14 15:49:02,766 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 22474 [2022-07-14 15:49:02,780 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 22474 [2022-07-14 15:49:02,781 INFO L73 IsDeterministic]: Start isDeterministic. Operand 22474 states and 41876 transitions. [2022-07-14 15:49:02,816 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:49:02,816 INFO L369 hiAutomatonCegarLoop]: Abstraction has 22474 states and 41876 transitions. [2022-07-14 15:49:02,831 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22474 states and 41876 transitions. [2022-07-14 15:49:03,007 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22474 to 9458. [2022-07-14 15:49:03,028 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9458 states, 9458 states have (on average 1.8679424825544513) internal successors, (17667), 9457 states have internal predecessors, (17667), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:03,048 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9458 states to 9458 states and 17667 transitions. [2022-07-14 15:49:03,048 INFO L392 hiAutomatonCegarLoop]: Abstraction has 9458 states and 17667 transitions. [2022-07-14 15:49:03,049 INFO L374 stractBuchiCegarLoop]: Abstraction has 9458 states and 17667 transitions. [2022-07-14 15:49:03,049 INFO L287 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-07-14 15:49:03,049 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9458 states and 17667 transitions. [2022-07-14 15:49:03,082 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2118 [2022-07-14 15:49:03,082 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:49:03,082 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:49:03,087 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:03,087 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:03,089 INFO L752 eck$LassoCheckResult]: Stem: 57131#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 57132#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 56712#L1866 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 56713#L1859 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 52872#L1874 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 52873#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 55791#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 54074#L702 assume { :end_inline_initFloors } true; 54075#L1942 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 55878#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 54557#L479 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 52841#L980 assume 0 == initPersonOnFloor_~floor#1; 52842#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 52181#L1088-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 56878#L772 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 53173#L784-2 assume { :end_inline_callOnFloor } true; 53174#L1124 assume { :end_inline_initPersonOnFloor } true; 55365#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 52396#L2102 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 52397#L2154 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 54341#L1315 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 54342#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 57717#L2119-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 56622#L2140-5 __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 56483#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 53049#L1421 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 53073#L709 assume !(0 == isFloorCalling_~floorID#1); 54839#L713 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 52380#L736 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 54195#L2715 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 54196#L2727 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 55382#L2864 assume !(0 != timeShift_~tmp___9~3#1); 56549#L2955 assume !(1 == ~doorState~0); 56193#L2955-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 54881#L2306 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 54883#L1283 stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 57707#L2310 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 52205#L2628 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 55415#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 52445#L2682 assume !(1 == ~currentHeading~0); 52446#L2692 assume !(0 == ~currentFloorID~0); 55177#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 57239#L2698-1 assume { :end_inline_continueInDirection } true; 55183#L2972-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 56975#L1446 assume !(-1 == ~expectedDirection~0); 53483#L1458 assume !(1 == ~expectedDirection~0); 55072#L1459 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 53101#L2987 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 53102#L2102-1 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 55753#L2154-3 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 55076#L1315-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 55077#L1316-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 58361#L1326-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 58332#L2119-12 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 58324#L2140-12 __utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 58316#L1331-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 58310#L1421-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 58308#L709-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 58303#L736-21 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 58300#L2715-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 58299#L2727-1 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 58297#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 58296#L2955-3 assume !(1 == ~doorState~0); 58295#L2955-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 58291#L2306-2 assume !(1 == stopRequestedInDirection_~dir#1); 58245#L2475-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 58240#L2628-2 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 58238#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 58239#L2682-3 assume !(1 == ~currentHeading~0); 60049#L2692-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 53259#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 53260#L2698-7 assume { :end_inline_continueInDirection } true; 52907#L2972-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 55995#L1446-1 assume !(-1 == ~expectedDirection~0); 57155#L1458-1 assume !(1 == ~expectedDirection~0); 57330#L1459-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 57779#L2987-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 58174#L2102-2 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 58173#L2154-6 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 58172#L1315-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 58170#L1316-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 58169#L1326-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 58166#L2119-23 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 58146#L2140-23 __utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 58140#L1331-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 58129#L1421-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 58126#L709-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 58122#L736-42 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 58119#L2715-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 58118#L2727-2 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 58116#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 58115#L2955-6 assume !(1 == ~doorState~0); 58113#L2955-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 58109#L2306-4 assume !(1 == stopRequestedInDirection_~dir#1); 58076#L2475-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 58059#L2628-4 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 58057#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 58056#L2682-6 assume !(1 == ~currentHeading~0); 58055#L2692-18 assume !(0 == ~currentFloorID~0); 52309#L2692-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 52249#L2698-13 assume { :end_inline_continueInDirection } true; 52250#L2972-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 59275#L1446-2 assume !(-1 == ~expectedDirection~0); 59273#L1458-2 assume !(1 == ~expectedDirection~0); 59271#L1459-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 59270#L2987-2 assume { :end_inline_timeShift } true; 59269#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 59268#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 59262#L479-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 59261#L980-1 assume 0 == initPersonOnFloor_~floor#1; 59243#L981-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 59226#L1088-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 59223#L772-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 58549#L784-5 assume { :end_inline_callOnFloor } true; 57700#L1124-1 assume { :end_inline_initPersonOnFloor } true; 57701#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 58479#L2102-3 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 58478#L2154-9 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 58476#L1315-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 58477#L1316-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 58480#L1326-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 58471#L2119-34 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 58452#L2140-34 __utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 58446#L1331-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 58439#L1421-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 58436#L709-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 58429#L736-63 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 58426#L2715-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 58424#L2727-3 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 58422#L2864-6 assume !(0 != timeShift_~tmp___9~3#1); 58421#L2955-9 assume !(1 == ~doorState~0); 58419#L2955-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 58414#L2306-6 assume !(1 == stopRequestedInDirection_~dir#1); 58384#L2475-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 58365#L2628-6 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 58364#L2963-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 58363#L2682-9 assume !(1 == ~currentHeading~0); 58362#L2692-27 assume !(0 == ~currentFloorID~0); 55852#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 52251#L2698-19 assume { :end_inline_continueInDirection } true; 52252#L2972-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 57662#L1446-3 assume !(-1 == ~expectedDirection~0); 53817#L1458-3 assume !(1 == ~expectedDirection~0); 54576#L1459-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 54577#L2987-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 56474#L198-2 [2022-07-14 15:49:03,090 INFO L754 eck$LassoCheckResult]: Loop: 56474#L198-2 assume !false; 56506#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 53591#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 53592#L1973 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 56424#L206 assume 1 != cleanup_~tmp___0~0#1; 57174#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 60133#L709-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 60129#L736-84 anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 60099#L2210 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 60094#L2274 isIdle_#t~ret67#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 60050#L2287 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 58053#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 58052#L2102-4 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 58051#L2154-12 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 58050#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 58048#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 58046#L1387-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 58030#L1398-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 58021#L1409-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 58014#L1420-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 58007#L1421-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 58006#L709-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 58000#L736-89 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 57997#L2715-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 57996#L2727-4 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 57994#L2864-8 assume !(0 != timeShift_~tmp___9~3#1); 57993#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 57991#L2955-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 57988#L2306-8 assume !(1 == stopRequestedInDirection_~dir#1); 57946#L2475-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 57937#L2628-8 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 57935#L2963-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 57936#L2682-12 assume !(1 == ~currentHeading~0); 60047#L2692-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 54729#L2692-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 57079#L2698-25 assume { :end_inline_continueInDirection } true; 52674#L2972-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 56619#L1446-4 assume !(-1 == ~expectedDirection~0); 53613#L1458-4 assume !(1 == ~expectedDirection~0); 53386#L1459-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 56473#L2987-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 56474#L198-2 [2022-07-14 15:49:03,091 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:03,091 INFO L85 PathProgramCache]: Analyzing trace with hash 1915755291, now seen corresponding path program 1 times [2022-07-14 15:49:03,091 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:03,092 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1920536973] [2022-07-14 15:49:03,092 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:03,092 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:03,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:03,175 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:03,175 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:03,175 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1920536973] [2022-07-14 15:49:03,176 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1920536973] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:03,176 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:03,176 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:49:03,176 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [595064398] [2022-07-14 15:49:03,176 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:03,177 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:49:03,177 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:03,177 INFO L85 PathProgramCache]: Analyzing trace with hash -2127495958, now seen corresponding path program 1 times [2022-07-14 15:49:03,177 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:03,178 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1314212451] [2022-07-14 15:49:03,178 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:03,178 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:03,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:03,202 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:03,203 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:03,203 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1314212451] [2022-07-14 15:49:03,203 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1314212451] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:03,203 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:03,204 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-14 15:49:03,204 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2131399377] [2022-07-14 15:49:03,204 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:03,204 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:49:03,204 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:49:03,205 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-14 15:49:03,205 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-14 15:49:03,206 INFO L87 Difference]: Start difference. First operand 9458 states and 17667 transitions. cyclomatic complexity: 8210 Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:03,541 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:49:03,542 INFO L93 Difference]: Finished difference Result 20522 states and 38423 transitions. [2022-07-14 15:49:03,545 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-14 15:49:03,547 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20522 states and 38423 transitions. [2022-07-14 15:49:03,630 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7532 [2022-07-14 15:49:03,701 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20522 states to 20522 states and 38423 transitions. [2022-07-14 15:49:03,701 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20522 [2022-07-14 15:49:03,718 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20522 [2022-07-14 15:49:03,718 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20522 states and 38423 transitions. [2022-07-14 15:49:03,737 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:49:03,738 INFO L369 hiAutomatonCegarLoop]: Abstraction has 20522 states and 38423 transitions. [2022-07-14 15:49:03,753 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20522 states and 38423 transitions. [2022-07-14 15:49:03,902 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20522 to 9476. [2022-07-14 15:49:03,917 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9476 states, 9476 states have (on average 1.8662937948501477) internal successors, (17685), 9475 states have internal predecessors, (17685), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:03,938 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9476 states to 9476 states and 17685 transitions. [2022-07-14 15:49:03,938 INFO L392 hiAutomatonCegarLoop]: Abstraction has 9476 states and 17685 transitions. [2022-07-14 15:49:03,938 INFO L374 stractBuchiCegarLoop]: Abstraction has 9476 states and 17685 transitions. [2022-07-14 15:49:03,938 INFO L287 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-07-14 15:49:03,939 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9476 states and 17685 transitions. [2022-07-14 15:49:03,973 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2122 [2022-07-14 15:49:03,974 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:49:03,974 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:49:03,977 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:03,977 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:03,978 INFO L752 eck$LassoCheckResult]: Stem: 87176#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 87177#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 86744#L1866 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 86745#L1859 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 82876#L1874 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 82877#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 85804#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 84079#L702 assume { :end_inline_initFloors } true; 84080#L1942 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 85891#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 84565#L479 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 82845#L980 assume 0 == initPersonOnFloor_~floor#1; 82846#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 82183#L1088-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 86920#L772 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 83178#L784-2 assume { :end_inline_callOnFloor } true; 83179#L1124 assume { :end_inline_initPersonOnFloor } true; 85376#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 82399#L2102 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 82400#L2154 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 84348#L1315 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 84349#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 87801#L2119-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 86650#L2140-5 __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 86508#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 83054#L1421 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 83078#L709 assume !(0 == isFloorCalling_~floorID#1); 84849#L713 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 82383#L736 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 84199#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 83247#L2119-10 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 82860#L2140-10 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 82861#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 87861#L2727 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 88349#L2864 assume !(0 != timeShift_~tmp___9~3#1); 87499#L2955 assume !(1 == ~doorState~0); 86210#L2955-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 84892#L2306 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 84894#L1283 stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 87790#L2310 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 82207#L2628 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 85428#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 82449#L2682 assume !(1 == ~currentHeading~0); 82450#L2692 assume !(0 == ~currentFloorID~0); 85188#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 87289#L2698-1 assume { :end_inline_continueInDirection } true; 85194#L2972-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 88240#L1446 assume !(-1 == ~expectedDirection~0); 88236#L1458 assume !(1 == ~expectedDirection~0); 88233#L1459 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 88232#L2987 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 88231#L2102-1 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 88230#L2154-3 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 88228#L1315-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 88227#L1316-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 88226#L1326-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 88224#L2119-12 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 88215#L2140-12 __utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 88195#L1331-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 88193#L1421-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 88191#L709-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 88187#L736-21 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 88186#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 88184#L2119-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 88176#L2140-21 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 88174#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 88173#L2727-1 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 88171#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 88170#L2955-3 assume !(1 == ~doorState~0); 88169#L2955-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 88168#L2306-2 assume !(1 == stopRequestedInDirection_~dir#1); 88117#L2475-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 88112#L2628-2 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 88110#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 88111#L2682-3 assume !(1 == ~currentHeading~0); 88347#L2692-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 83264#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 83265#L2698-7 assume { :end_inline_continueInDirection } true; 82911#L2972-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 88732#L1446-1 assume !(-1 == ~expectedDirection~0); 88729#L1458-1 assume !(1 == ~expectedDirection~0); 88727#L1459-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 88622#L2987-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 88621#L2102-2 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 88620#L2154-6 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 88613#L1315-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 88611#L1316-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 88610#L1326-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 88607#L2119-23 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 88604#L2140-23 __utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 88603#L1331-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 88339#L1421-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 88329#L709-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 88322#L736-42 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 88321#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 88317#L2119-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 88309#L2140-32 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 88300#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 88291#L2727-2 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 88290#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 88289#L2955-6 assume !(1 == ~doorState~0); 88278#L2955-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 88274#L2306-4 assume !(1 == stopRequestedInDirection_~dir#1); 88044#L2475-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 88026#L2628-4 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 88006#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 88004#L2682-6 assume !(1 == ~currentHeading~0); 88002#L2692-18 assume !(0 == ~currentFloorID~0); 82311#L2692-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 82251#L2698-13 assume { :end_inline_continueInDirection } true; 82252#L2972-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 83955#L1446-2 assume !(-1 == ~expectedDirection~0); 83018#L1458-2 assume !(1 == ~expectedDirection~0); 83052#L1459-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 84844#L2987-2 assume { :end_inline_timeShift } true; 84845#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 84455#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 84456#L479-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 85044#L980-1 assume 0 == initPersonOnFloor_~floor#1; 86520#L981-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 82832#L1088-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 84405#L772-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 82458#L784-5 assume { :end_inline_callOnFloor } true; 83826#L1124-1 assume { :end_inline_initPersonOnFloor } true; 87784#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 88593#L2102-3 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 88592#L2154-9 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 88589#L1315-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 88590#L1316-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 88591#L1326-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 88583#L2119-34 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 88579#L2140-34 __utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 88578#L1331-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 88320#L1421-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 88312#L709-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 88304#L736-63 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 88295#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 88092#L2119-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 88089#L2140-43 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 88086#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 88085#L2727-3 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 88083#L2864-6 assume !(0 != timeShift_~tmp___9~3#1); 88082#L2955-9 assume !(1 == ~doorState~0); 88079#L2955-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 88077#L2306-6 assume !(1 == stopRequestedInDirection_~dir#1); 88075#L2475-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 88056#L2628-6 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 88053#L2963-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 88051#L2682-9 assume !(1 == ~currentHeading~0); 87999#L2692-27 assume !(0 == ~currentFloorID~0); 85865#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 82253#L2698-19 assume { :end_inline_continueInDirection } true; 82254#L2972-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 87742#L1446-3 assume !(-1 == ~expectedDirection~0); 83822#L1458-3 assume !(1 == ~expectedDirection~0); 84584#L1459-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 84585#L2987-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 90223#L198-2 [2022-07-14 15:49:03,979 INFO L754 eck$LassoCheckResult]: Loop: 90223#L198-2 assume !false; 90222#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 90221#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 90220#L1973 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 87218#L206 assume 1 != cleanup_~tmp___0~0#1; 86177#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 86178#L709-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 82204#L736-84 anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 86135#L2210 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 84698#L2274 isIdle_#t~ret67#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 87341#L2287 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 87909#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 89813#L2102-4 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 89812#L2154-12 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 89811#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 87858#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 85516#L1387-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 84341#L1398-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 82912#L1409-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 82914#L1420-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 82421#L1421-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 82422#L709-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 83855#L736-89 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 83129#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 83130#L2119-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 83874#L2140-54 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 82552#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 82554#L2727-4 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 88512#L2864-8 assume !(0 != timeShift_~tmp___9~3#1); 88511#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 88510#L2955-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 88508#L2306-8 assume !(1 == stopRequestedInDirection_~dir#1); 88478#L2475-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 88468#L2628-8 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 88465#L2963-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 88466#L2682-12 assume !(1 == ~currentHeading~0); 88702#L2692-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 84737#L2692-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 87124#L2698-25 assume { :end_inline_continueInDirection } true; 82679#L2972-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 86647#L1446-4 assume !(-1 == ~expectedDirection~0); 83618#L1458-4 assume !(1 == ~expectedDirection~0); 83391#L1459-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 87418#L2987-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 90223#L198-2 [2022-07-14 15:49:03,980 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:03,980 INFO L85 PathProgramCache]: Analyzing trace with hash -1116097257, now seen corresponding path program 1 times [2022-07-14 15:49:03,981 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:03,981 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1974188482] [2022-07-14 15:49:03,981 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:03,981 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:04,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:04,061 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:04,062 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:04,062 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1974188482] [2022-07-14 15:49:04,063 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1974188482] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:04,063 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:04,063 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:49:04,066 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1055115462] [2022-07-14 15:49:04,066 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:04,067 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:49:04,067 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:04,068 INFO L85 PathProgramCache]: Analyzing trace with hash 2035995216, now seen corresponding path program 1 times [2022-07-14 15:49:04,068 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:04,071 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [939024154] [2022-07-14 15:49:04,072 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:04,072 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:04,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:04,118 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:04,118 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:04,118 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [939024154] [2022-07-14 15:49:04,118 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [939024154] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:04,119 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:04,119 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-14 15:49:04,119 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1994958776] [2022-07-14 15:49:04,120 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:04,120 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:49:04,120 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:49:04,121 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-14 15:49:04,121 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-14 15:49:04,122 INFO L87 Difference]: Start difference. First operand 9476 states and 17685 transitions. cyclomatic complexity: 8210 Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 7 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:06,561 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:49:06,561 INFO L93 Difference]: Finished difference Result 58453 states and 109563 transitions. [2022-07-14 15:49:06,562 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-07-14 15:49:06,563 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58453 states and 109563 transitions. [2022-07-14 15:49:06,961 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 21069 [2022-07-14 15:49:07,189 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58453 states to 58453 states and 109563 transitions. [2022-07-14 15:49:07,189 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58453 [2022-07-14 15:49:07,230 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58453 [2022-07-14 15:49:07,230 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58453 states and 109563 transitions. [2022-07-14 15:49:07,276 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:49:07,276 INFO L369 hiAutomatonCegarLoop]: Abstraction has 58453 states and 109563 transitions. [2022-07-14 15:49:07,308 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58453 states and 109563 transitions. [2022-07-14 15:49:07,660 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58453 to 18911. [2022-07-14 15:49:07,687 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18911 states, 18911 states have (on average 1.8658452752366348) internal successors, (35285), 18910 states have internal predecessors, (35285), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:07,725 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18911 states to 18911 states and 35285 transitions. [2022-07-14 15:49:07,725 INFO L392 hiAutomatonCegarLoop]: Abstraction has 18911 states and 35285 transitions. [2022-07-14 15:49:07,725 INFO L374 stractBuchiCegarLoop]: Abstraction has 18911 states and 35285 transitions. [2022-07-14 15:49:07,725 INFO L287 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-07-14 15:49:07,725 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18911 states and 35285 transitions. [2022-07-14 15:49:07,783 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4254 [2022-07-14 15:49:07,784 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:49:07,784 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:49:07,787 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:07,787 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:07,787 INFO L752 eck$LassoCheckResult]: Stem: 155496#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 155497#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 154979#L1866 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 154980#L1859 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 150858#L1874 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 150859#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 153934#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 152105#L702 assume { :end_inline_initFloors } true; 152106#L1942 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 154032#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 152610#L479 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 150827#L980 assume 0 == initPersonOnFloor_~floor#1; 150828#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 150164#L1088-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 155179#L772 assume !(0 == callOnFloor_~floorID#1); 155181#L775 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 151166#L784-2 assume { :end_inline_callOnFloor } true; 151167#L1124 assume { :end_inline_initPersonOnFloor } true; 153465#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 150377#L2102 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 150378#L2154 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 152380#L1315 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 152381#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 156291#L2119-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 154873#L2140-5 __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 156536#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 151065#L1421 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 151066#L709 assume !(0 == isFloorCalling_~floorID#1); 152906#L713 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 150363#L736 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 152232#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 152234#L2119-10 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 150840#L2140-10 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 150841#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 156660#L2727 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 156661#L2864 assume !(0 != timeShift_~tmp___9~3#1); 157321#L2955 assume !(1 == ~doorState~0); 157320#L2955-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 157319#L2306 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 156448#L1283 stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 156449#L2310 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 157283#L2628 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 157281#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 157280#L2682 assume !(1 == ~currentHeading~0); 153258#L2692 assume !(0 == ~currentFloorID~0); 153259#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 155625#L2698-1 assume { :end_inline_continueInDirection } true; 153267#L2972-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 155297#L1446 assume !(-1 == ~expectedDirection~0); 151495#L1458 assume !(1 == ~expectedDirection~0); 153147#L1459 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 151094#L2987 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 151095#L2102-1 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 153893#L2154-3 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 153154#L1315-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 153155#L1316-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 158594#L1326-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 158592#L2119-12 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 153908#L2140-12 __utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 153909#L1331-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 151969#L1421-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 152062#L709-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 150765#L736-21 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 157169#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 156611#L2119-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 150292#L2140-21 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 155258#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 156806#L2727-1 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 156804#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 156803#L2955-3 assume !(1 == ~doorState~0); 156801#L2955-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 156794#L2306-2 assume !(1 == stopRequestedInDirection_~dir#1); 156742#L2475-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 156737#L2628-2 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 156735#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 156736#L2682-3 assume !(1 == ~currentHeading~0); 156962#L2692-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 157528#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 152000#L2698-7 assume { :end_inline_continueInDirection } true; 150893#L2972-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 158657#L1446-1 assume !(-1 == ~expectedDirection~0); 158654#L1458-1 assume !(1 == ~expectedDirection~0); 158642#L1459-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 158641#L2987-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 158640#L2102-2 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 158639#L2154-6 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 158637#L1315-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 158638#L1316-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 159888#L1326-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 158628#L2119-23 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 158623#L2140-23 __utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 157518#L1331-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 155873#L1421-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 155874#L709-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 150477#L736-42 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 157167#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 154356#L2119-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 150355#L2140-32 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 150356#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 155582#L2727-2 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 157139#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 154982#L2955-6 assume !(1 == ~doorState~0); 154983#L2955-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 153393#L2306-4 assume !(1 == stopRequestedInDirection_~dir#1); 153394#L2475-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 157053#L2628-4 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 157051#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 157052#L2682-6 assume !(1 == ~currentHeading~0); 158617#L2692-18 assume !(0 == ~currentFloorID~0); 152844#L2692-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 152845#L2698-13 assume { :end_inline_continueInDirection } true; 160132#L2972-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 160129#L1446-2 assume !(-1 == ~expectedDirection~0); 160127#L1458-2 assume !(1 == ~expectedDirection~0); 160125#L1459-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 160124#L2987-2 assume { :end_inline_timeShift } true; 160123#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 160122#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 160116#L479-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 160114#L980-1 assume 0 == initPersonOnFloor_~floor#1; 160097#L981-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 160047#L1088-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 160042#L772-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 160039#L784-5 assume { :end_inline_callOnFloor } true; 159994#L1124-1 assume { :end_inline_initPersonOnFloor } true; 159990#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 159989#L2102-3 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 159988#L2154-9 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 159986#L1315-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 159987#L1316-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 153045#L2119-33 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 152240#L2140-33 __utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 155960#L1320-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 150757#L1421-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 153459#L709-63 assume !(0 == isFloorCalling_~floorID#1); 153460#L713-63 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 163424#L736-63 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 163423#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 156973#L2119-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 156366#L2140-43 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 155894#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 155895#L2727-3 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 157137#L2864-6 assume !(0 != timeShift_~tmp___9~3#1); 151377#L2955-9 assume !(1 == ~doorState~0); 151378#L2955-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 151021#L2306-6 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 151023#L1283-15 stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 155919#L2310-6 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 163274#L2628-6 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 163374#L2963-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 163373#L2682-9 assume !(1 == ~currentHeading~0); 163371#L2692-27 assume !(0 == ~currentFloorID~0); 163368#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 163189#L2698-19 assume { :end_inline_continueInDirection } true; 163187#L2972-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 163183#L1446-3 assume !(-1 == ~expectedDirection~0); 163178#L1458-3 assume !(1 == ~expectedDirection~0); 163175#L1459-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 163174#L2987-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 163172#L198-2 [2022-07-14 15:49:07,789 INFO L754 eck$LassoCheckResult]: Loop: 163172#L198-2 assume !false; 163051#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 163040#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 163039#L1973 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 163038#L206 assume 1 != cleanup_~tmp___0~0#1; 162983#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 162981#L709-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 162982#L736-84 anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 162945#L2210 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 162863#L2274 isIdle_#t~ret67#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 162939#L2287 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 162938#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 162937#L2102-4 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 162936#L2154-12 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 162935#L1315-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 162931#L1316-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 162927#L1326-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 162924#L2119-45 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 162917#L2140-45 __utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 162893#L1331-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 162888#L1421-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 156066#L709-89 assume !(0 == isFloorCalling_~floorID#1); 156067#L713-89 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 168157#L736-89 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 168156#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 168155#L2119-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 168149#L2140-54 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 168146#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 168144#L2727-4 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 168140#L2864-8 assume !(0 != timeShift_~tmp___9~3#1); 168139#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 168124#L2955-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 168119#L2306-8 assume !(1 == stopRequestedInDirection_~dir#1); 168104#L2475-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 168097#L2628-8 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 168095#L2963-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 168096#L2682-12 assume !(1 == ~currentHeading~0); 168215#L2692-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 155663#L2692-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 155664#L2698-25 assume { :end_inline_continueInDirection } true; 168038#L2972-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 163185#L1446-4 assume !(-1 == ~expectedDirection~0); 163181#L1458-4 assume !(1 == ~expectedDirection~0); 163176#L1459-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 163173#L2987-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 163172#L198-2 [2022-07-14 15:49:07,790 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:07,790 INFO L85 PathProgramCache]: Analyzing trace with hash -1397154899, now seen corresponding path program 1 times [2022-07-14 15:49:07,790 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:07,790 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2118561237] [2022-07-14 15:49:07,790 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:07,791 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:07,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:08,010 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:08,011 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:08,011 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2118561237] [2022-07-14 15:49:08,011 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2118561237] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:08,011 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:08,012 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:49:08,012 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [659901785] [2022-07-14 15:49:08,012 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:08,012 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:49:08,013 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:08,013 INFO L85 PathProgramCache]: Analyzing trace with hash -1726704744, now seen corresponding path program 1 times [2022-07-14 15:49:08,013 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:08,014 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [324790606] [2022-07-14 15:49:08,014 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:08,014 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:08,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:08,042 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:08,043 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:08,043 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [324790606] [2022-07-14 15:49:08,043 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [324790606] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:08,043 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:08,043 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:49:08,043 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [229234092] [2022-07-14 15:49:08,044 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:08,044 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:49:08,044 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:49:08,044 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 15:49:08,045 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-14 15:49:08,045 INFO L87 Difference]: Start difference. First operand 18911 states and 35285 transitions. cyclomatic complexity: 16375 Second operand has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:08,933 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:49:08,933 INFO L93 Difference]: Finished difference Result 44709 states and 83241 transitions. [2022-07-14 15:49:08,934 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-14 15:49:08,934 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 44709 states and 83241 transitions. [2022-07-14 15:49:09,116 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 16252 [2022-07-14 15:49:09,555 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 44709 states to 44709 states and 83241 transitions. [2022-07-14 15:49:09,556 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 44709 [2022-07-14 15:49:09,606 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 44709 [2022-07-14 15:49:09,607 INFO L73 IsDeterministic]: Start isDeterministic. Operand 44709 states and 83241 transitions. [2022-07-14 15:49:09,627 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:49:09,627 INFO L369 hiAutomatonCegarLoop]: Abstraction has 44709 states and 83241 transitions. [2022-07-14 15:49:09,654 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44709 states and 83241 transitions. [2022-07-14 15:49:10,064 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44709 to 18911. [2022-07-14 15:49:10,090 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18911 states, 18911 states have (on average 1.8599227962561473) internal successors, (35173), 18910 states have internal predecessors, (35173), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:10,130 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18911 states to 18911 states and 35173 transitions. [2022-07-14 15:49:10,130 INFO L392 hiAutomatonCegarLoop]: Abstraction has 18911 states and 35173 transitions. [2022-07-14 15:49:10,130 INFO L374 stractBuchiCegarLoop]: Abstraction has 18911 states and 35173 transitions. [2022-07-14 15:49:10,130 INFO L287 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-07-14 15:49:10,131 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18911 states and 35173 transitions. [2022-07-14 15:49:10,193 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4254 [2022-07-14 15:49:10,193 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:49:10,193 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:49:10,196 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:10,197 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:10,197 INFO L752 eck$LassoCheckResult]: Stem: 219030#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 219031#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 218548#L1866 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 218549#L1859 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 214490#L1874 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 214491#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 217522#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 215719#L702 assume { :end_inline_initFloors } true; 215720#L1942 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 217617#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 216215#L479 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 214459#L980 assume 0 == initPersonOnFloor_~floor#1; 214460#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 213796#L1088-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 218742#L772 assume !(0 == callOnFloor_~floorID#1); 218744#L775 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 214793#L784-2 assume { :end_inline_callOnFloor } true; 214794#L1124 assume { :end_inline_initPersonOnFloor } true; 217065#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 217066#L2102 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 220072#L2154 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 220073#L1315 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 220075#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 220076#L2119-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 225422#L2140-5 __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 225387#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 225383#L1421 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 225382#L709 assume !(0 == isFloorCalling_~floorID#1); 225378#L713 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 225377#L736 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 225376#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 214862#L2119-10 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 214472#L2140-10 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 214473#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 219866#L2727 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 226161#L2864 assume !(0 != timeShift_~tmp___9~3#1); 219409#L2955 assume !(1 == ~doorState~0); 217963#L2955-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 216554#L2306 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 216556#L1283 stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 219919#L2310 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 225220#L2628 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 225217#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 225215#L2682 assume !(1 == ~currentHeading~0); 225209#L2692 assume !(0 == ~currentFloorID~0); 225208#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 225207#L2698-1 assume { :end_inline_continueInDirection } true; 225204#L2972-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 225202#L1446 assume !(-1 == ~expectedDirection~0); 225199#L1458 assume !(1 == ~expectedDirection~0); 225197#L1459 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 225196#L2987 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 225195#L2102-1 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 225194#L2154-3 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 225193#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 215489#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 215491#L1387-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 224155#L1398-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 224141#L1409-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 224142#L1420-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 224147#L1421-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 226016#L709-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 226008#L736-21 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 226004#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 226005#L2119-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 226007#L2140-21 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 226006#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 220261#L2727-1 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 220257#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 220254#L2955-3 assume !(1 == ~doorState~0); 220237#L2955-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 220220#L2306-2 assume !(1 == stopRequestedInDirection_~dir#1); 220221#L2475-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 220172#L2628-2 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 220173#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 223882#L2682-3 assume !(1 == ~currentHeading~0); 223877#L2692-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 223869#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 223859#L2698-7 assume { :end_inline_continueInDirection } true; 223855#L2972-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 223853#L1446-1 assume !(-1 == ~expectedDirection~0); 223845#L1458-1 assume !(1 == ~expectedDirection~0); 223840#L1459-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 223838#L2987-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 223833#L2102-2 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 223831#L2154-6 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 223081#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 221128#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 220899#L1387-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 220900#L1398-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 220041#L1409-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 216813#L1420-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 216815#L1421-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 221366#L709-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 221363#L736-42 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 220718#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 220715#L2119-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 220711#L2140-32 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 220709#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 220708#L2727-2 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 220706#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 220705#L2955-6 assume !(1 == ~doorState~0); 220704#L2955-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 220698#L2306-4 assume !(1 == stopRequestedInDirection_~dir#1); 220527#L2475-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 220506#L2628-4 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 220497#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 220492#L2682-6 assume !(1 == ~currentHeading~0); 220474#L2692-18 assume !(0 == ~currentFloorID~0); 220464#L2692-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 220460#L2698-13 assume { :end_inline_continueInDirection } true; 220458#L2972-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 220455#L1446-2 assume !(-1 == ~expectedDirection~0); 220453#L1458-2 assume !(1 == ~expectedDirection~0); 220451#L1459-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 220450#L2987-2 assume { :end_inline_timeShift } true; 220449#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 220448#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 220442#L479-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 220441#L980-1 assume 0 == initPersonOnFloor_~floor#1; 220423#L981-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 220406#L1088-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 220404#L772-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 220405#L784-5 assume { :end_inline_callOnFloor } true; 226323#L1124-1 assume { :end_inline_initPersonOnFloor } true; 226322#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 226321#L2102-3 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 226320#L2154-9 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 226318#L1315-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 226316#L1316-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 226317#L2119-33 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 228202#L2140-33 __utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 227440#L1320-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 226314#L1421-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 227436#L709-63 assume !(0 == isFloorCalling_~floorID#1); 227434#L713-63 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 227426#L736-63 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 226283#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 226284#L2119-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 227022#L2140-43 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 227021#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 227020#L2727-3 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 227018#L2864-6 assume !(0 != timeShift_~tmp___9~3#1); 214994#L2955-9 assume !(1 == ~doorState~0); 214995#L2955-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 214649#L2306-6 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 214651#L1283-15 stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 215455#L2310-6 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 214963#L2628-6 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 217694#L2963-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 216017#L2682-9 assume !(1 == ~currentHeading~0); 216018#L2692-27 assume !(0 == ~currentFloorID~0); 217591#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 213866#L2698-19 assume { :end_inline_continueInDirection } true; 213867#L2972-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 229442#L1446-3 assume !(-1 == ~expectedDirection~0); 229439#L1458-3 assume !(1 == ~expectedDirection~0); 229437#L1459-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 219620#L2987-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 218282#L198-2 [2022-07-14 15:49:10,198 INFO L754 eck$LassoCheckResult]: Loop: 218282#L198-2 assume !false; 218316#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 215219#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 215220#L1973 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 226771#L206 assume 1 != cleanup_~tmp___0~0#1; 226769#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 226764#L709-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 226754#L736-84 anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 226730#L2210 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 226695#L2274 isIdle_#t~ret67#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 226723#L2287 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 226721#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 226676#L2102-4 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 226674#L2154-12 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 226669#L1315-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 226666#L1316-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 219856#L2119-44 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 232630#L2140-44 __utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 232593#L1320-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 226662#L1421-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 232591#L709-89 assume !(0 == isFloorCalling_~floorID#1); 232587#L713-89 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 232586#L736-89 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 229327#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 229328#L2119-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 231091#L2140-54 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 231090#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 231089#L2727-4 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 231088#L2864-8 assume !(0 != timeShift_~tmp___9~3#1); 231087#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 231086#L2955-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 231084#L2306-8 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 231085#L1283-20 stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 231063#L2310-8 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 215071#L2628-8 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 215072#L2963-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 219973#L2682-12 assume !(1 == ~currentHeading~0); 218663#L2692-36 assume !(0 == ~currentFloorID~0); 216395#L2692-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 219192#L2698-25 assume { :end_inline_continueInDirection } true; 230206#L2972-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 230204#L1446-4 assume !(-1 == ~expectedDirection~0); 215244#L1458-4 assume !(1 == ~expectedDirection~0); 215011#L1459-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 218281#L2987-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 218282#L198-2 [2022-07-14 15:49:10,199 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:10,199 INFO L85 PathProgramCache]: Analyzing trace with hash 190419229, now seen corresponding path program 1 times [2022-07-14 15:49:10,199 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:10,199 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [806468966] [2022-07-14 15:49:10,199 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:10,199 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:10,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:10,266 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:10,267 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:10,268 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [806468966] [2022-07-14 15:49:10,268 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [806468966] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:10,268 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:10,268 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:49:10,272 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2122739964] [2022-07-14 15:49:10,272 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:10,273 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:49:10,275 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:10,275 INFO L85 PathProgramCache]: Analyzing trace with hash -184195222, now seen corresponding path program 1 times [2022-07-14 15:49:10,275 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:10,276 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [177026950] [2022-07-14 15:49:10,276 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:10,276 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:10,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:10,323 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:10,323 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:10,324 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [177026950] [2022-07-14 15:49:10,324 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [177026950] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:10,324 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:10,324 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-14 15:49:10,324 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [795158875] [2022-07-14 15:49:10,324 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:10,325 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:49:10,325 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:49:10,326 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-14 15:49:10,326 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-14 15:49:10,326 INFO L87 Difference]: Start difference. First operand 18911 states and 35173 transitions. cyclomatic complexity: 16263 Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 6 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:13,882 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:49:13,882 INFO L93 Difference]: Finished difference Result 37163 states and 68723 transitions. [2022-07-14 15:49:13,883 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-14 15:49:13,883 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 37163 states and 68723 transitions. [2022-07-14 15:49:14,028 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8890 [2022-07-14 15:49:14,117 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 37163 states to 37163 states and 68723 transitions. [2022-07-14 15:49:14,117 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 37163 [2022-07-14 15:49:14,141 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 37163 [2022-07-14 15:49:14,141 INFO L73 IsDeterministic]: Start isDeterministic. Operand 37163 states and 68723 transitions. [2022-07-14 15:49:14,162 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:49:14,162 INFO L369 hiAutomatonCegarLoop]: Abstraction has 37163 states and 68723 transitions. [2022-07-14 15:49:14,179 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37163 states and 68723 transitions. [2022-07-14 15:49:14,612 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37163 to 25747. [2022-07-14 15:49:14,642 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25747 states, 25747 states have (on average 1.8517497184137959) internal successors, (47677), 25746 states have internal predecessors, (47677), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:14,702 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25747 states to 25747 states and 47677 transitions. [2022-07-14 15:49:14,703 INFO L392 hiAutomatonCegarLoop]: Abstraction has 25747 states and 47677 transitions. [2022-07-14 15:49:14,703 INFO L374 stractBuchiCegarLoop]: Abstraction has 25747 states and 47677 transitions. [2022-07-14 15:49:14,703 INFO L287 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2022-07-14 15:49:14,703 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 25747 states and 47677 transitions. [2022-07-14 15:49:14,788 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6070 [2022-07-14 15:49:14,789 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:49:14,789 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:49:14,793 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:14,794 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:14,794 INFO L752 eck$LassoCheckResult]: Stem: 275179#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 275180#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 274684#L1866 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 274685#L1859 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 270585#L1874 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 270586#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 273638#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 271821#L702 assume { :end_inline_initFloors } true; 271822#L1942 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 273735#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 272327#L479 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 270554#L980 assume 0 == initPersonOnFloor_~floor#1; 270555#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 269898#L1088-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 274884#L772 assume !(0 == callOnFloor_~floorID#1); 274885#L775 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 272064#L784-2 assume { :end_inline_callOnFloor } true; 279820#L1124 assume { :end_inline_initPersonOnFloor } true; 279819#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 279818#L2102 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 279817#L2154 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 279815#L1315 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 279813#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 279814#L2119-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 279834#L2140-5 __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 274420#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 270765#L1421 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 275325#L709 assume !(0 == isFloorCalling_~floorID#1); 275326#L713 assume !(1 == isFloorCalling_~floorID#1); 276124#L717 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 270096#L736 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 271948#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 271950#L2119-10 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 279785#L2140-10 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 279784#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 279783#L2727 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 279782#L2864 assume !(0 != timeShift_~tmp___9~3#1); 279781#L2955 assume !(1 == ~doorState~0); 279780#L2955-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 279778#L2306 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 279777#L1283 stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 275974#L2310 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 269918#L2628 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 273240#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 270161#L2682 assume !(1 == ~currentHeading~0); 270162#L2692 assume !(0 == ~currentFloorID~0); 272975#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 276288#L2698-1 assume { :end_inline_continueInDirection } true; 279624#L2972-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 279622#L1446 assume !(-1 == ~expectedDirection~0); 272866#L1458 assume !(1 == ~expectedDirection~0); 272867#L1459 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 275746#L2987 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 279585#L2102-1 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 279581#L2154-3 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 279576#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 279575#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 279573#L1387-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 279548#L1398-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 279523#L1409-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 279510#L1420-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 279500#L1421-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 279493#L709-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 279483#L736-21 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 279477#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 279479#L2119-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 279484#L2140-21 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 279480#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 279465#L2727-1 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 279466#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 280043#L2955-3 assume !(1 == ~doorState~0); 280035#L2955-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 280028#L2306-2 assume !(1 == stopRequestedInDirection_~dir#1); 280012#L2475-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 280006#L2628-2 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 280004#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 280003#L2682-3 assume !(1 == ~currentHeading~0); 279636#L2692-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 270980#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 270981#L2698-7 assume { :end_inline_continueInDirection } true; 278024#L2972-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 278019#L1446-1 assume !(-1 == ~expectedDirection~0); 278013#L1458-1 assume !(1 == ~expectedDirection~0); 278010#L1459-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 278008#L2987-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 278006#L2102-2 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 278004#L2154-6 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 277996#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 277981#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 277979#L1387-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 277977#L1398-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 277941#L1409-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 277929#L1420-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 277915#L1421-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 277907#L709-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 277898#L736-42 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 277892#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 277894#L2119-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 277899#L2140-32 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 277895#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 277880#L2727-2 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 277881#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 284609#L2955-6 assume !(1 == ~doorState~0); 284605#L2955-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 284594#L2306-4 assume !(1 == stopRequestedInDirection_~dir#1); 284588#L2475-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 284571#L2628-4 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 284568#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 284569#L2682-6 assume !(1 == ~currentHeading~0); 284662#L2692-18 assume !(0 == ~currentFloorID~0); 270028#L2692-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 272557#L2698-13 assume { :end_inline_continueInDirection } true; 276438#L2972-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 276435#L1446-2 assume !(-1 == ~expectedDirection~0); 276433#L1458-2 assume !(1 == ~expectedDirection~0); 276431#L1459-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 276430#L2987-2 assume { :end_inline_timeShift } true; 276429#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 276428#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 276422#L479-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 276421#L980-1 assume 0 == initPersonOnFloor_~floor#1; 276403#L981-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 276386#L1088-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 276384#L772-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 276385#L784-5 assume { :end_inline_callOnFloor } true; 286402#L1124-1 assume { :end_inline_initPersonOnFloor } true; 286401#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 286400#L2102-3 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 286399#L2154-9 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 286396#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 286319#L1377-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 273054#L2119-38 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 273055#L2140-38 __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 290906#L1381-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 280266#L1421-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 276330#L709-63 assume !(0 == isFloorCalling_~floorID#1); 276331#L713-63 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 276324#L736-63 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 276323#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 275149#L2119-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 270779#L2140-43 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 275600#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 275601#L2727-3 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 295371#L2864-6 assume !(0 != timeShift_~tmp___9~3#1); 295370#L2955-9 assume !(1 == ~doorState~0); 295369#L2955-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 295368#L2306-6 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 295367#L1283-15 stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 295309#L2310-6 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 287980#L2628-6 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 273814#L2963-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 272125#L2682-9 assume !(1 == ~currentHeading~0); 272126#L2692-27 assume !(0 == ~currentFloorID~0); 284813#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 269967#L2698-19 assume { :end_inline_continueInDirection } true; 269968#L2972-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 288415#L1446-3 assume !(-1 == ~expectedDirection~0); 288409#L1458-3 assume !(1 == ~expectedDirection~0); 288404#L1459-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 288402#L2987-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 288400#L198-2 [2022-07-14 15:49:14,795 INFO L754 eck$LassoCheckResult]: Loop: 288400#L198-2 assume !false; 288399#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 288394#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 288333#L1973 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 288304#L206 assume 1 != cleanup_~tmp___0~0#1; 288302#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 288296#L709-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 288289#L736-84 anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 288269#L2210 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 288226#L2274 isIdle_#t~ret67#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 288264#L2287 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 288263#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 288262#L2102-4 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 288261#L2154-12 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 288197#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 288047#L1377-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 288048#L2119-49 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 288478#L2140-49 __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 288445#L1381-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 288434#L1421-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 275775#L709-89 assume !(0 == isFloorCalling_~floorID#1); 275776#L713-89 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 288430#L736-89 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 288429#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 288428#L2119-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 288423#L2140-54 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 288421#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 288420#L2727-4 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 288418#L2864-8 assume !(0 != timeShift_~tmp___9~3#1); 288417#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 288195#L2955-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 288194#L2306-8 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 288192#L1283-20 stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 288137#L2310-8 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 288107#L2628-8 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 288121#L2963-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 288120#L2682-12 assume !(1 == ~currentHeading~0); 288055#L2692-36 assume !(0 == ~currentFloorID~0); 286552#L2692-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 275118#L2698-25 assume { :end_inline_continueInDirection } true; 270388#L2972-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 288412#L1446-4 assume !(-1 == ~expectedDirection~0); 288406#L1458-4 assume !(1 == ~expectedDirection~0); 288403#L1459-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 288401#L2987-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 288400#L198-2 [2022-07-14 15:49:14,795 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:14,796 INFO L85 PathProgramCache]: Analyzing trace with hash 554886073, now seen corresponding path program 1 times [2022-07-14 15:49:14,796 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:14,796 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1595753840] [2022-07-14 15:49:14,796 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:14,796 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:14,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:14,854 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:14,855 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:14,855 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1595753840] [2022-07-14 15:49:14,855 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1595753840] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:14,855 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:14,855 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:49:14,856 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1452424569] [2022-07-14 15:49:14,856 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:14,856 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:49:14,856 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:14,856 INFO L85 PathProgramCache]: Analyzing trace with hash -943785297, now seen corresponding path program 1 times [2022-07-14 15:49:14,857 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:14,857 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [790168590] [2022-07-14 15:49:14,857 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:14,857 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:14,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:14,877 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:14,877 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:14,877 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [790168590] [2022-07-14 15:49:14,877 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [790168590] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:14,878 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:14,878 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-14 15:49:14,878 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1215639252] [2022-07-14 15:49:14,878 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:14,878 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:49:14,878 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:49:14,879 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-14 15:49:14,879 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-14 15:49:14,879 INFO L87 Difference]: Start difference. First operand 25747 states and 47677 transitions. cyclomatic complexity: 21931 Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:19,453 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:49:19,453 INFO L93 Difference]: Finished difference Result 61167 states and 113699 transitions. [2022-07-14 15:49:19,453 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-14 15:49:19,454 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 61167 states and 113699 transitions. [2022-07-14 15:49:19,809 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15676 [2022-07-14 15:49:19,969 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 61167 states to 61167 states and 113699 transitions. [2022-07-14 15:49:19,969 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 61167 [2022-07-14 15:49:20,009 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 61167 [2022-07-14 15:49:20,009 INFO L73 IsDeterministic]: Start isDeterministic. Operand 61167 states and 113699 transitions. [2022-07-14 15:49:20,045 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:49:20,045 INFO L369 hiAutomatonCegarLoop]: Abstraction has 61167 states and 113699 transitions. [2022-07-14 15:49:20,075 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61167 states and 113699 transitions. [2022-07-14 15:49:20,589 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61167 to 25175. [2022-07-14 15:49:20,612 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25175 states, 25175 states have (on average 1.8530685203574975) internal successors, (46651), 25174 states have internal predecessors, (46651), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:20,661 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25175 states to 25175 states and 46651 transitions. [2022-07-14 15:49:20,662 INFO L392 hiAutomatonCegarLoop]: Abstraction has 25175 states and 46651 transitions. [2022-07-14 15:49:20,662 INFO L374 stractBuchiCegarLoop]: Abstraction has 25175 states and 46651 transitions. [2022-07-14 15:49:20,662 INFO L287 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2022-07-14 15:49:20,662 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 25175 states and 46651 transitions. [2022-07-14 15:49:20,726 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5927 [2022-07-14 15:49:20,726 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:49:20,726 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:49:20,728 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:20,728 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:20,729 INFO L752 eck$LassoCheckResult]: Stem: 361974#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 361975#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 361508#L1866 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 361509#L1859 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 357520#L1874 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 357521#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 360528#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 358743#L702 assume { :end_inline_initFloors } true; 358744#L1942 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 360624#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 359240#L479 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 357489#L980 assume 0 == initPersonOnFloor_~floor#1; 357490#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 356834#L1088-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 361696#L772 assume !(0 == callOnFloor_~floorID#1); 361697#L775 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 358976#L784-2 assume { :end_inline_callOnFloor } true; 360310#L1124 assume { :end_inline_initPersonOnFloor } true; 360311#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 357045#L2102 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 357046#L2154 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 359014#L1315 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 359015#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 370307#L2119-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 362918#L2140-5 __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 361264#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 357696#L1421 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 362109#L709 assume !(0 == isFloorCalling_~floorID#1); 362110#L713 assume !(1 == isFloorCalling_~floorID#1); 362837#L717 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 357032#L736 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 370151#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 370150#L2119-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 370136#L2123-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 370135#L2140-10 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 370134#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 370133#L2727 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 370132#L2864 assume !(0 != timeShift_~tmp___9~3#1); 370131#L2955 assume !(1 == ~doorState~0); 370130#L2955-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 370128#L2306 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 370127#L1283 stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 362703#L2310 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 356852#L2628 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 360131#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 362688#L2682 assume !(1 == ~currentHeading~0); 359877#L2692 assume !(0 == ~currentFloorID~0); 359878#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 362972#L2698-1 assume { :end_inline_continueInDirection } true; 369844#L2972-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 369842#L1446 assume !(-1 == ~expectedDirection~0); 369839#L1458 assume !(1 == ~expectedDirection~0); 369837#L1459 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 369835#L2987 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 369829#L2102-1 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 369827#L2154-3 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 369825#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 369823#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 369822#L1387-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 369805#L1398-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 369799#L1409-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 369791#L1420-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 369790#L1421-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 369789#L709-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 369788#L736-21 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 369786#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 369787#L2119-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 370199#L2140-21 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 369785#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 369784#L2727-1 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 369781#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 362908#L2955-3 assume !(1 == ~doorState~0); 362909#L2955-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 358288#L2306-2 assume !(1 == stopRequestedInDirection_~dir#1); 358289#L2475-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 380897#L2628-2 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 380895#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 380896#L2682-3 assume !(1 == ~currentHeading~0); 381967#L2692-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 357910#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 357911#L2698-7 assume { :end_inline_continueInDirection } true; 368570#L2972-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 368564#L1446-1 assume !(-1 == ~expectedDirection~0); 368563#L1458-1 assume !(1 == ~expectedDirection~0); 368554#L1459-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 368555#L2987-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 368550#L2102-2 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 368551#L2154-6 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 368542#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 368543#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 368545#L1387-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 368544#L1398-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 368538#L1409-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 368507#L1420-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 368130#L1421-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 368128#L709-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 368078#L736-42 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 368074#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 368075#L2119-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 368077#L2140-32 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 368076#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 368073#L2727-2 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 368070#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 361511#L2955-6 assume !(1 == ~doorState~0); 361512#L2955-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 360004#L2306-4 assume !(1 == stopRequestedInDirection_~dir#1); 360005#L2475-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 380783#L2628-4 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 380781#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 380780#L2682-6 assume !(1 == ~currentHeading~0); 380778#L2692-18 assume !(0 == ~currentFloorID~0); 356964#L2692-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 359466#L2698-13 assume { :end_inline_continueInDirection } true; 366764#L2972-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 366765#L1446-2 assume !(-1 == ~expectedDirection~0); 366754#L1458-2 assume !(1 == ~expectedDirection~0); 366753#L1459-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 366747#L2987-2 assume { :end_inline_timeShift } true; 366748#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 366741#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 366735#L479-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 366733#L980-1 assume 0 == initPersonOnFloor_~floor#1; 366734#L981-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 366696#L1088-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 366697#L772-2 assume !(0 == callOnFloor_~floorID#1); 366691#L775-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 366689#L784-5 assume { :end_inline_callOnFloor } true; 366684#L1124-1 assume { :end_inline_initPersonOnFloor } true; 366685#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 366536#L2102-3 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 366537#L2154-9 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 366532#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 366533#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 366676#L1387-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 366273#L1398-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 366266#L1409-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 366238#L1420-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 364692#L1421-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 364691#L709-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 364201#L736-63 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 364197#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 364198#L2119-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 364200#L2140-43 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 364199#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 364196#L2727-3 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 364192#L2864-6 assume !(0 != timeShift_~tmp___9~3#1); 364193#L2955-9 assume !(1 == ~doorState~0); 361049#L2955-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 357676#L2306-6 assume !(1 == stopRequestedInDirection_~dir#1); 357677#L2475-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 380957#L2628-6 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 380955#L2963-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 380954#L2682-9 assume !(1 == ~currentHeading~0); 380953#L2692-27 assume !(0 == ~currentFloorID~0); 360598#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 362871#L2698-19 assume { :end_inline_continueInDirection } true; 363173#L2972-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 363174#L1446-3 assume !(-1 == ~expectedDirection~0); 363153#L1458-3 assume !(1 == ~expectedDirection~0); 363152#L1459-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 363142#L2987-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 363141#L198-2 [2022-07-14 15:49:20,729 INFO L754 eck$LassoCheckResult]: Loop: 363141#L198-2 assume !false; 363136#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 363137#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 363131#L1973 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 363132#L206 assume 1 != cleanup_~tmp___0~0#1; 363123#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 363124#L709-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 363104#L736-84 anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 363105#L2210 assume !(0 != anyStopRequested_~tmp___3~1#1); 374740#L2214 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 363066#L2274 isIdle_#t~ret67#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 363067#L2287 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 363062#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 363063#L2102-4 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 363058#L2154-12 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 363059#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 377884#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 363052#L1387-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 363051#L1398-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 363050#L1409-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 363017#L1420-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 363014#L1421-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 363013#L709-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 363012#L736-89 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 363010#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 363007#L2119-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 363008#L2140-54 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 366120#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 366121#L2727-4 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 366113#L2864-8 assume !(0 != timeShift_~tmp___9~3#1); 362330#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 362331#L2955-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 362185#L2306-8 assume !(1 == stopRequestedInDirection_~dir#1); 362186#L2475-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 380726#L2628-8 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 380724#L2963-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 380725#L2682-12 assume !(1 == ~currentHeading~0); 381135#L2692-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 359418#L2692-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 362140#L2698-25 assume { :end_inline_continueInDirection } true; 363169#L2972-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 363170#L1446-4 assume !(-1 == ~expectedDirection~0); 363149#L1458-4 assume !(1 == ~expectedDirection~0); 363148#L1459-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 363140#L2987-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 363141#L198-2 [2022-07-14 15:49:20,730 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:20,730 INFO L85 PathProgramCache]: Analyzing trace with hash 299544833, now seen corresponding path program 1 times [2022-07-14 15:49:20,730 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:20,730 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [468677192] [2022-07-14 15:49:20,731 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:20,731 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:20,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:20,770 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:20,770 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:20,771 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [468677192] [2022-07-14 15:49:20,771 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [468677192] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:20,771 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:20,771 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:49:20,771 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [573225952] [2022-07-14 15:49:20,771 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:20,772 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:49:20,772 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:20,772 INFO L85 PathProgramCache]: Analyzing trace with hash 664519880, now seen corresponding path program 1 times [2022-07-14 15:49:20,772 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:20,772 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2057084958] [2022-07-14 15:49:20,772 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:20,773 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:20,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:20,794 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:20,794 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:20,794 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2057084958] [2022-07-14 15:49:20,794 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2057084958] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:20,794 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:20,795 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-14 15:49:20,795 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [326172021] [2022-07-14 15:49:20,795 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:20,795 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:49:20,795 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:49:20,796 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-14 15:49:20,796 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-14 15:49:20,796 INFO L87 Difference]: Start difference. First operand 25175 states and 46651 transitions. cyclomatic complexity: 21477 Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:22,870 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:49:22,870 INFO L93 Difference]: Finished difference Result 112787 states and 210562 transitions. [2022-07-14 15:49:22,870 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-14 15:49:22,871 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 112787 states and 210562 transitions. [2022-07-14 15:49:23,509 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 28843 [2022-07-14 15:49:23,829 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 112787 states to 112787 states and 210562 transitions. [2022-07-14 15:49:23,829 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 112787 [2022-07-14 15:49:23,898 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 112787 [2022-07-14 15:49:23,899 INFO L73 IsDeterministic]: Start isDeterministic. Operand 112787 states and 210562 transitions. [2022-07-14 15:49:23,961 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:49:23,961 INFO L369 hiAutomatonCegarLoop]: Abstraction has 112787 states and 210562 transitions. [2022-07-14 15:49:24,013 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 112787 states and 210562 transitions. [2022-07-14 15:49:24,700 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 112787 to 49203. [2022-07-14 15:49:24,738 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 49203 states, 49203 states have (on average 1.8538503749771356) internal successors, (91215), 49202 states have internal predecessors, (91215), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:25,023 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49203 states to 49203 states and 91215 transitions. [2022-07-14 15:49:25,024 INFO L392 hiAutomatonCegarLoop]: Abstraction has 49203 states and 91215 transitions. [2022-07-14 15:49:25,024 INFO L374 stractBuchiCegarLoop]: Abstraction has 49203 states and 91215 transitions. [2022-07-14 15:49:25,024 INFO L287 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2022-07-14 15:49:25,024 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 49203 states and 91215 transitions. [2022-07-14 15:49:25,142 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11600 [2022-07-14 15:49:25,142 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:49:25,142 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:49:25,144 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:25,145 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:25,145 INFO L752 eck$LassoCheckResult]: Stem: 500103#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 500104#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 499592#L1866 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 499593#L1859 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 495503#L1874 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 495504#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 498562#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 496732#L702 assume { :end_inline_initFloors } true; 496733#L1942 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 498664#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 497239#L479 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 495472#L980 assume 0 == initPersonOnFloor_~floor#1; 495473#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 494818#L1088-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 499783#L772 assume !(0 == callOnFloor_~floorID#1); 499784#L775 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 496973#L784-2 assume { :end_inline_callOnFloor } true; 501961#L1124 assume { :end_inline_initPersonOnFloor } true; 501960#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 501959#L2102 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 501958#L2154 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 501956#L1315 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 501957#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 501968#L2119-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 501976#L2140-5 __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 501938#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 501926#L1421 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 501925#L709 assume !(0 == isFloorCalling_~floorID#1); 501924#L713 assume !(1 == isFloorCalling_~floorID#1); 501922#L717 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 501920#L736 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 501919#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 501918#L2119-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 501914#L2123-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 501913#L2140-10 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 501911#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 501910#L2727 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 501908#L2864 assume !(0 != timeShift_~tmp___9~3#1); 501907#L2955 assume !(1 == ~doorState~0); 501906#L2955-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 501905#L2306 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 501008#L1283 stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 501009#L2310 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 501748#L2628 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 501745#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 501740#L2682 assume !(1 == ~currentHeading~0); 501734#L2692 assume !(0 == ~currentFloorID~0); 501729#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 501726#L2698-1 assume { :end_inline_continueInDirection } true; 501723#L2972-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 501721#L1446 assume !(-1 == ~expectedDirection~0); 501718#L1458 assume !(1 == ~expectedDirection~0); 501714#L1459 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 501708#L2987 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 501704#L2102-1 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 501703#L2154-3 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 501701#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 501699#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 501697#L1387-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 501679#L1398-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 501673#L1409-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 501664#L1420-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 501663#L1421-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 501661#L709-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 501660#L736-21 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 501659#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 501657#L2119-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 501654#L2140-21 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 501646#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 501648#L2727-1 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 501633#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 501634#L2955-3 assume !(1 == ~doorState~0); 501597#L2955-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 501598#L2306-2 assume !(1 == stopRequestedInDirection_~dir#1); 501556#L2475-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 501552#L2628-2 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 501542#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 501544#L2682-3 assume !(1 == ~currentHeading~0); 505068#L2692-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 505061#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 505060#L2698-7 assume { :end_inline_continueInDirection } true; 505058#L2972-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 513487#L1446-1 assume !(-1 == ~expectedDirection~0); 513484#L1458-1 assume !(1 == ~expectedDirection~0); 513482#L1459-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 513481#L2987-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 513480#L2102-2 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 513479#L2154-6 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 513477#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 513476#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 502975#L1387-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 502972#L1398-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 502969#L1409-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 502935#L1420-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 502884#L1421-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 502878#L709-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 502873#L736-42 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 502823#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 502816#L2119-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 502812#L2140-32 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 502809#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 502807#L2727-2 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 502804#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 502802#L2955-6 assume !(1 == ~doorState~0); 502800#L2955-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 502796#L2306-4 assume !(1 == stopRequestedInDirection_~dir#1); 502792#L2475-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 502773#L2628-4 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 502774#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 502767#L2682-6 assume !(1 == ~currentHeading~0); 502768#L2692-18 assume !(0 == ~currentFloorID~0); 511260#L2692-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 511257#L2698-13 assume { :end_inline_continueInDirection } true; 511255#L2972-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 511252#L1446-2 assume !(-1 == ~expectedDirection~0); 511250#L1458-2 assume !(1 == ~expectedDirection~0); 511248#L1459-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 511247#L2987-2 assume { :end_inline_timeShift } true; 511246#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 511245#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 511239#L479-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 511238#L980-1 assume 0 == initPersonOnFloor_~floor#1; 511220#L981-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 511203#L1088-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 511201#L772-2 assume !(0 == callOnFloor_~floorID#1); 511199#L775-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 511196#L784-5 assume { :end_inline_callOnFloor } true; 511195#L1124-1 assume { :end_inline_initPersonOnFloor } true; 511194#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 511193#L2102-3 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 511192#L2154-9 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 511190#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 511189#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 508162#L1387-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 508156#L1398-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 508153#L1409-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 508127#L1420-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 508073#L1421-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 508068#L709-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 508056#L736-63 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 508055#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 508052#L2119-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 508050#L2140-43 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 508044#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 508045#L2727-3 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 508037#L2864-6 assume !(0 != timeShift_~tmp___9~3#1); 508038#L2955-9 assume !(1 == ~doorState~0); 508033#L2955-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 508034#L2306-6 assume !(1 == stopRequestedInDirection_~dir#1); 509132#L2475-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 508007#L2628-6 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 508008#L2963-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 507985#L2682-9 assume !(1 == ~currentHeading~0); 507986#L2692-27 assume !(0 == ~currentFloorID~0); 510847#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 510844#L2698-19 assume { :end_inline_continueInDirection } true; 510841#L2972-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 510838#L1446-3 assume !(-1 == ~expectedDirection~0); 510832#L1458-3 assume !(1 == ~expectedDirection~0); 510827#L1459-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 510825#L2987-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 510823#L198-2 [2022-07-14 15:49:25,146 INFO L754 eck$LassoCheckResult]: Loop: 510823#L198-2 assume !false; 510822#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 510821#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 510820#L1973 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 510819#L206 assume 1 != cleanup_~tmp___0~0#1; 510818#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 510816#L709-84 assume !(0 == isFloorCalling_~floorID#1); 510817#L713-84 assume !(1 == isFloorCalling_~floorID#1); 514694#L717-84 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 514687#L736-84 anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 514677#L2210 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 514672#L2274 isIdle_#t~ret67#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 514671#L2287 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 514670#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 514669#L2102-4 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 514668#L2154-12 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 514666#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 514665#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 501435#L1387-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 501433#L1398-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 501431#L1409-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 501395#L1420-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 501391#L1421-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 501386#L709-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 501380#L736-89 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 501370#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 501367#L2119-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 501368#L2140-54 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 502355#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 502354#L2727-4 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 502352#L2864-8 assume !(0 != timeShift_~tmp___9~3#1); 502351#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 502350#L2955-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 502348#L2306-8 assume !(1 == stopRequestedInDirection_~dir#1); 501274#L2475-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 501266#L2628-8 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 501259#L2963-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 501261#L2682-12 assume !(1 == ~currentHeading~0); 509117#L2692-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 500266#L2692-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 500267#L2698-25 assume { :end_inline_continueInDirection } true; 510840#L2972-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 510835#L1446-4 assume !(-1 == ~expectedDirection~0); 510829#L1458-4 assume !(1 == ~expectedDirection~0); 510826#L1459-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 510824#L2987-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 510823#L198-2 [2022-07-14 15:49:25,146 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:25,146 INFO L85 PathProgramCache]: Analyzing trace with hash 299544833, now seen corresponding path program 2 times [2022-07-14 15:49:25,146 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:25,147 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [395719333] [2022-07-14 15:49:25,147 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:25,147 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:25,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:25,188 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:25,188 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:25,188 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [395719333] [2022-07-14 15:49:25,188 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [395719333] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:25,188 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:25,189 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:49:25,189 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [916410601] [2022-07-14 15:49:25,189 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:25,189 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:49:25,189 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:25,190 INFO L85 PathProgramCache]: Analyzing trace with hash 1404607243, now seen corresponding path program 1 times [2022-07-14 15:49:25,190 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:25,190 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [118787663] [2022-07-14 15:49:25,190 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:25,190 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:25,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:25,200 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:25,201 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:25,201 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [118787663] [2022-07-14 15:49:25,201 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [118787663] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:25,201 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:25,201 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:49:25,201 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [682028070] [2022-07-14 15:49:25,202 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:25,202 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:49:25,202 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:49:25,202 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-14 15:49:25,202 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-14 15:49:25,203 INFO L87 Difference]: Start difference. First operand 49203 states and 91215 transitions. cyclomatic complexity: 42013 Second operand has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:26,249 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:49:26,250 INFO L93 Difference]: Finished difference Result 53847 states and 99551 transitions. [2022-07-14 15:49:26,250 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-14 15:49:26,250 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53847 states and 99551 transitions. [2022-07-14 15:49:26,425 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11990 [2022-07-14 15:49:26,556 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53847 states to 53847 states and 99551 transitions. [2022-07-14 15:49:26,557 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53847 [2022-07-14 15:49:26,587 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53847 [2022-07-14 15:49:26,587 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53847 states and 99551 transitions. [2022-07-14 15:49:26,613 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:49:26,614 INFO L369 hiAutomatonCegarLoop]: Abstraction has 53847 states and 99551 transitions. [2022-07-14 15:49:26,636 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53847 states and 99551 transitions. [2022-07-14 15:49:27,139 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53847 to 48667. [2022-07-14 15:49:27,179 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48667 states, 48667 states have (on average 1.8535557975630303) internal successors, (90207), 48666 states have internal predecessors, (90207), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:27,258 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48667 states to 48667 states and 90207 transitions. [2022-07-14 15:49:27,259 INFO L392 hiAutomatonCegarLoop]: Abstraction has 48667 states and 90207 transitions. [2022-07-14 15:49:27,259 INFO L374 stractBuchiCegarLoop]: Abstraction has 48667 states and 90207 transitions. [2022-07-14 15:49:27,259 INFO L287 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2022-07-14 15:49:27,259 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 48667 states and 90207 transitions. [2022-07-14 15:49:27,394 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11304 [2022-07-14 15:49:27,394 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:49:27,394 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:49:27,397 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:27,397 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:27,398 INFO L752 eck$LassoCheckResult]: Stem: 602913#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 602914#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 602465#L1866 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 602466#L1859 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 598557#L1874 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 598558#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 601496#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 599756#L702 assume { :end_inline_initFloors } true; 599757#L1942 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 601586#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 600246#L479 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 598526#L980 assume 0 == initPersonOnFloor_~floor#1; 598527#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 597876#L1088-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 602639#L772 assume !(0 == callOnFloor_~floorID#1); 602640#L775 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 599987#L784-2 assume { :end_inline_callOnFloor } true; 632772#L1124 assume { :end_inline_initPersonOnFloor } true; 632771#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 632770#L2102 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 632769#L2154 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 632767#L1315 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 632768#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 632779#L2119-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 632787#L2140-5 __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 632749#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 632737#L1421 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 632736#L709 assume !(0 == isFloorCalling_~floorID#1); 632735#L713 assume !(1 == isFloorCalling_~floorID#1); 632733#L717 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 632731#L736 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 632730#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 632729#L2119-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 632725#L2123-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 632724#L2140-10 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 632722#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 632721#L2727 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 632719#L2864 assume !(0 != timeShift_~tmp___9~3#1); 632718#L2955 assume !(1 == ~doorState~0); 632717#L2955-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 632716#L2306 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 632715#L1283 stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 632714#L2310 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 601040#L2628 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 639772#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 639770#L2682 assume !(1 == ~currentHeading~0); 639764#L2692 assume !(0 == ~currentFloorID~0); 639762#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 639761#L2698-1 assume { :end_inline_continueInDirection } true; 639758#L2972-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 639752#L1446 assume !(-1 == ~expectedDirection~0); 639748#L1458 assume !(1 == ~expectedDirection~0); 639746#L1459 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 639745#L2987 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 639744#L2102-1 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 639743#L2154-3 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 639740#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 639738#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 639739#L1387-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 646444#L1398-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 646443#L1409-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 646410#L1420-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 646409#L1421-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 646408#L709-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 644426#L736-21 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 644425#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 637992#L2119-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 635265#L2140-21 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 635264#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 635263#L2727-1 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 635261#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 635260#L2955-3 assume !(1 == ~doorState~0); 635259#L2955-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 634788#L2306-2 assume !(1 == stopRequestedInDirection_~dir#1); 631502#L2475-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 631496#L2628-2 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 631492#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 631487#L2682-3 assume !(1 == ~currentHeading~0); 631485#L2692-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 631482#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 631481#L2698-7 assume { :end_inline_continueInDirection } true; 631478#L2972-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 631476#L1446-1 assume !(-1 == ~expectedDirection~0); 631473#L1458-1 assume !(1 == ~expectedDirection~0); 631471#L1459-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 631470#L2987-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 631469#L2102-2 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 631468#L2154-6 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 631466#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 631467#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 623703#L1387-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 623701#L1398-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 623695#L1409-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 623690#L1420-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 623607#L1421-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 623605#L709-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 623604#L736-42 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 623603#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 623600#L2119-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 623597#L2140-32 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 623591#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 623589#L2727-2 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 623587#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 623586#L2955-6 assume !(1 == ~doorState~0); 623585#L2955-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 623579#L2306-4 assume !(1 == stopRequestedInDirection_~dir#1); 623580#L2475-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 624142#L2628-4 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 624140#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 624116#L2682-6 assume !(1 == ~currentHeading~0); 621183#L2692-18 assume !(0 == ~currentFloorID~0); 621178#L2692-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 621175#L2698-13 assume { :end_inline_continueInDirection } true; 621173#L2972-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 621170#L1446-2 assume !(-1 == ~expectedDirection~0); 621168#L1458-2 assume !(1 == ~expectedDirection~0); 621166#L1459-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 621165#L2987-2 assume { :end_inline_timeShift } true; 621164#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 621163#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 621157#L479-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 621156#L980-1 assume 0 == initPersonOnFloor_~floor#1; 621138#L981-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 621121#L1088-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 621119#L772-2 assume !(0 == callOnFloor_~floorID#1); 621113#L775-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 621108#L784-5 assume { :end_inline_callOnFloor } true; 620993#L1124-1 assume { :end_inline_initPersonOnFloor } true; 620987#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 620978#L2102-3 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 620973#L2154-9 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 620970#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 620793#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 620532#L1387-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 620520#L1398-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 620514#L1409-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 620509#L1420-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 620447#L1421-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 620442#L709-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 620440#L736-63 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 620438#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 620439#L2119-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 620441#L2140-43 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 620436#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 620434#L2727-3 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 620435#L2864-6 assume !(0 != timeShift_~tmp___9~3#1); 623427#L2955-9 assume !(1 == ~doorState~0); 623388#L2955-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 623385#L2306-6 assume !(1 == stopRequestedInDirection_~dir#1); 623381#L2475-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 623361#L2628-6 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 623358#L2963-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 623356#L2682-9 assume !(1 == ~currentHeading~0); 623348#L2692-27 assume !(0 == ~currentFloorID~0); 621261#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 620208#L2698-19 assume { :end_inline_continueInDirection } true; 603866#L2972-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 603863#L1446-3 assume !(-1 == ~expectedDirection~0); 603857#L1458-3 assume !(1 == ~expectedDirection~0); 603852#L1459-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 603850#L2987-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 603848#L198-2 [2022-07-14 15:49:27,398 INFO L754 eck$LassoCheckResult]: Loop: 603848#L198-2 assume !false; 603847#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 603845#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 603846#L1973 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 604521#L206 assume 1 != cleanup_~tmp___0~0#1; 604519#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 604518#L709-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 604517#L736-84 anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 604351#L2210 assume !(0 != anyStopRequested_~tmp___3~1#1); 604349#L2214 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 604348#L709-85 assume !(0 == isFloorCalling_~floorID#1); 604345#L713-85 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 604342#L736-85 anyStopRequested_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret63#1;havoc anyStopRequested_#t~ret63#1; 604343#L2221 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 604450#L2274 isIdle_#t~ret67#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 604448#L2287 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 604181#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 604171#L2102-4 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 604163#L2154-12 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 604161#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 604162#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 604131#L1387-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 604114#L1398-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 604105#L1409-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 604097#L1420-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 604094#L1421-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 604092#L709-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 604091#L736-89 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 604090#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 604089#L2119-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 604084#L2140-54 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 604082#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 604081#L2727-4 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 604079#L2864-8 assume !(0 != timeShift_~tmp___9~3#1); 604078#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 604077#L2955-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 604075#L2306-8 assume !(1 == stopRequestedInDirection_~dir#1); 604076#L2475-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 603905#L2628-8 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 603899#L2963-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 603890#L2682-12 assume !(1 == ~currentHeading~0); 603881#L2692-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 603874#L2692-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 603871#L2698-25 assume { :end_inline_continueInDirection } true; 603865#L2972-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 603860#L1446-4 assume !(-1 == ~expectedDirection~0); 603854#L1458-4 assume !(1 == ~expectedDirection~0); 603851#L1459-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 603849#L2987-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 603848#L198-2 [2022-07-14 15:49:27,399 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:27,399 INFO L85 PathProgramCache]: Analyzing trace with hash 299544833, now seen corresponding path program 3 times [2022-07-14 15:49:27,399 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:27,400 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [163266387] [2022-07-14 15:49:27,400 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:27,400 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:27,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:27,449 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:27,449 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:27,450 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [163266387] [2022-07-14 15:49:27,450 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [163266387] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:27,450 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:27,450 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:49:27,450 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [304662361] [2022-07-14 15:49:27,450 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:27,451 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:49:27,451 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:27,451 INFO L85 PathProgramCache]: Analyzing trace with hash -192497024, now seen corresponding path program 1 times [2022-07-14 15:49:27,451 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:27,451 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [673664311] [2022-07-14 15:49:27,452 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:27,452 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:27,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:27,471 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:27,471 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:27,471 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [673664311] [2022-07-14 15:49:27,472 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [673664311] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:27,472 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:27,472 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:49:27,472 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [749444860] [2022-07-14 15:49:27,472 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:27,472 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:49:27,473 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:49:27,473 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 15:49:27,473 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-14 15:49:27,473 INFO L87 Difference]: Start difference. First operand 48667 states and 90207 transitions. cyclomatic complexity: 41541 Second operand has 4 states, 4 states have (on average 12.25) internal successors, (49), 4 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:28,376 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:49:28,376 INFO L93 Difference]: Finished difference Result 89521 states and 166255 transitions. [2022-07-14 15:49:28,376 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-14 15:49:28,377 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 89521 states and 166255 transitions. [2022-07-14 15:49:29,001 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 21554 [2022-07-14 15:49:29,245 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 89521 states to 89521 states and 166255 transitions. [2022-07-14 15:49:29,246 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 89521 [2022-07-14 15:49:29,311 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 89521 [2022-07-14 15:49:29,311 INFO L73 IsDeterministic]: Start isDeterministic. Operand 89521 states and 166255 transitions. [2022-07-14 15:49:29,366 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:49:29,366 INFO L369 hiAutomatonCegarLoop]: Abstraction has 89521 states and 166255 transitions. [2022-07-14 15:49:29,413 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89521 states and 166255 transitions. [2022-07-14 15:49:30,074 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89521 to 48719. [2022-07-14 15:49:30,115 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48719 states, 48719 states have (on average 1.8526447587183645) internal successors, (90259), 48718 states have internal predecessors, (90259), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:30,194 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48719 states to 48719 states and 90259 transitions. [2022-07-14 15:49:30,194 INFO L392 hiAutomatonCegarLoop]: Abstraction has 48719 states and 90259 transitions. [2022-07-14 15:49:30,194 INFO L374 stractBuchiCegarLoop]: Abstraction has 48719 states and 90259 transitions. [2022-07-14 15:49:30,194 INFO L287 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2022-07-14 15:49:30,194 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 48719 states and 90259 transitions. [2022-07-14 15:49:30,310 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11316 [2022-07-14 15:49:30,310 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:49:30,310 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:49:30,313 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:30,313 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:30,313 INFO L752 eck$LassoCheckResult]: Stem: 741380#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 741381#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 740874#L1866 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 740875#L1859 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 736760#L1874 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 736761#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 739818#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 737995#L702 assume { :end_inline_initFloors } true; 737996#L1942 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 739915#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 738502#L479 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 736729#L980 assume 0 == initPersonOnFloor_~floor#1; 736730#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 736076#L1088-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 741072#L772 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 737057#L784-2 assume { :end_inline_callOnFloor } true; 737058#L1124 assume { :end_inline_initPersonOnFloor } true; 739362#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 736287#L2102 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 736288#L2154 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 738278#L1315 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 738279#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 742202#L2119-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 740763#L2140-5 __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 740601#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 736935#L1421 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 736959#L709 assume !(0 == isFloorCalling_~floorID#1); 738792#L713 assume !(1 == isFloorCalling_~floorID#1); 738793#L717 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 736272#L736 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 738127#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 737130#L2119-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 737131#L2123-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 736744#L2140-10 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 736745#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 742295#L2727 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 742558#L2864 assume !(0 != timeShift_~tmp___9~3#1); 741781#L2955 assume !(1 == ~doorState~0); 740261#L2955-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 738836#L2306 assume !(1 == stopRequestedInDirection_~dir#1); 738837#L2475 assume !(0 == ~currentFloorID~0); 742124#L2481 assume !(~currentFloorID~0 > 0); 739329#L2496 assume ~currentFloorID~0 > 0; 743626#L2498 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 743627#L2499 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 743581#L2628 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 742977#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 742978#L2682 assume !(1 == ~currentHeading~0); 739154#L2692 assume !(0 == ~currentFloorID~0); 739155#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 741516#L2698-1 assume { :end_inline_continueInDirection } true; 739162#L2972-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 747535#L1446 assume !(-1 == ~expectedDirection~0); 747529#L1458 assume !(1 == ~expectedDirection~0); 747524#L1459 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 746515#L2987 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 746514#L2102-1 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 746513#L2154-3 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 746512#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 746508#L1377-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 746509#L2119-16 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 749934#L2140-16 __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 749927#L1381-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 749922#L1421-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 749921#L709-21 assume !(0 == isFloorCalling_~floorID#1); 749920#L713-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 749916#L736-21 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 749915#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 749914#L2119-21 assume !(0 == buttonForFloorIsPressed_~floorID#1); 749913#L2123-21 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 749901#L2140-21 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 749899#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 749898#L2727-1 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 749717#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 749710#L2955-3 assume !(1 == ~doorState~0); 749660#L2955-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 749658#L2306-2 assume !(1 == stopRequestedInDirection_~dir#1); 749657#L2475-2 assume !(0 == ~currentFloorID~0); 749656#L2481-2 assume !(~currentFloorID~0 > 0); 741412#L2496-2 assume ~currentFloorID~0 > 0; 741413#L2498-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 738492#L2499-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 736245#L2628-2 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 749896#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 741596#L2682-3 assume !(1 == ~currentHeading~0); 741598#L2692-9 assume !(0 == ~currentFloorID~0); 737147#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 737148#L2698-7 assume { :end_inline_continueInDirection } true; 759109#L2972-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 759103#L1446-1 assume !(-1 == ~expectedDirection~0); 758820#L1458-1 assume !(1 == ~expectedDirection~0); 758816#L1459-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 758817#L2987-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 761290#L2102-2 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 761288#L2154-6 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 761285#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 761286#L1377-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 761277#L2119-27 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 761224#L2140-27 __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 761194#L1381-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 761190#L1421-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 761188#L709-42 assume !(0 == isFloorCalling_~floorID#1); 760187#L713-42 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 760183#L736-42 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 760181#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 760180#L2119-32 assume !(0 == buttonForFloorIsPressed_~floorID#1); 758782#L2123-32 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 758779#L2140-32 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 758774#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 753382#L2727-2 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 750264#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 750256#L2955-6 assume !(1 == ~doorState~0); 750228#L2955-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 742593#L2306-4 assume !(1 == stopRequestedInDirection_~dir#1); 742589#L2475-4 assume !(0 == ~currentFloorID~0); 742590#L2481-4 assume !(~currentFloorID~0 > 0); 742583#L2496-4 assume ~currentFloorID~0 > 0; 750192#L2498-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 741316#L2499-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 738342#L2628-4 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 750472#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 750473#L2682-6 assume !(1 == ~currentHeading~0); 783538#L2692-18 assume !(0 == ~currentFloorID~0); 783536#L2692-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 783534#L2698-13 assume { :end_inline_continueInDirection } true; 783532#L2972-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 783529#L1446-2 assume !(-1 == ~expectedDirection~0); 783527#L1458-2 assume !(1 == ~expectedDirection~0); 783525#L1459-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 783524#L2987-2 assume { :end_inline_timeShift } true; 783509#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 783502#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 783496#L479-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 782942#L980-1 assume 0 == initPersonOnFloor_~floor#1; 774561#L981-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 774541#L1088-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 774481#L772-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 749623#L784-5 assume { :end_inline_callOnFloor } true; 773911#L1124-1 assume { :end_inline_initPersonOnFloor } true; 769247#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 769245#L2102-3 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 769243#L2154-9 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 769240#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 769241#L1377-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 764277#L2119-38 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 764262#L2140-38 __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 764252#L1381-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 764247#L1421-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 764245#L709-63 assume !(0 == isFloorCalling_~floorID#1); 764073#L713-63 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 764066#L736-63 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 764062#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 764063#L2119-43 assume !(0 == buttonForFloorIsPressed_~floorID#1); 764069#L2123-43 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 764065#L2140-43 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 764064#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 764061#L2727-3 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 764058#L2864-6 assume !(0 != timeShift_~tmp___9~3#1); 737261#L2955-9 assume !(1 == ~doorState~0); 737262#L2955-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 736915#L2306-6 assume !(1 == stopRequestedInDirection_~dir#1); 736916#L2475-6 assume !(0 == ~currentFloorID~0); 739760#L2481-6 assume !(~currentFloorID~0 > 0); 738497#L2496-6 assume ~currentFloorID~0 > 0; 738499#L2498-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 743954#L2499-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 743262#L2628-6 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 743263#L2963-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 783016#L2682-9 assume !(1 == ~currentHeading~0); 783014#L2692-27 assume !(0 == ~currentFloorID~0); 783012#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 783011#L2698-19 assume { :end_inline_continueInDirection } true; 783008#L2972-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 774600#L1446-3 assume !(-1 == ~expectedDirection~0); 774595#L1458-3 assume !(1 == ~expectedDirection~0); 774592#L1459-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 774590#L2987-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 774587#L198-2 [2022-07-14 15:49:30,314 INFO L754 eck$LassoCheckResult]: Loop: 774587#L198-2 assume !false; 774585#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 774583#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 774581#L1973 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 774579#L206 assume 1 != cleanup_~tmp___0~0#1; 774577#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 774576#L709-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 774542#L736-84 anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 774000#L2210 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 753389#L2274 isIdle_#t~ret67#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 773909#L2287 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 772808#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 772807#L2102-4 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 772806#L2154-12 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 772804#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 772805#L1377-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 763207#L2119-49 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 763202#L2140-49 __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 763160#L1381-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 763154#L1421-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 763152#L709-89 assume !(0 == isFloorCalling_~floorID#1); 763146#L713-89 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 763145#L736-89 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 763144#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 763143#L2119-54 assume !(0 == buttonForFloorIsPressed_~floorID#1); 763139#L2123-54 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 763138#L2140-54 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 763136#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 763135#L2727-4 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 763129#L2864-8 assume !(0 != timeShift_~tmp___9~3#1); 741765#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 741766#L2955-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 783765#L2306-8 assume !(1 == stopRequestedInDirection_~dir#1); 783742#L2475-8 assume !(0 == ~currentFloorID~0); 783741#L2481-8 assume !(~currentFloorID~0 > 0); 741989#L2496-8 assume ~currentFloorID~0 > 0; 783738#L2498-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 742483#L2499-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 739775#L2628-8 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 783994#L2963-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 783995#L2682-12 assume !(1 == ~currentHeading~0); 740992#L2692-36 assume !(0 == ~currentFloorID~0); 738674#L2692-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 784622#L2698-25 assume { :end_inline_continueInDirection } true; 784619#L2972-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 784618#L1446-4 assume !(-1 == ~expectedDirection~0); 784616#L1458-4 assume !(1 == ~expectedDirection~0); 782938#L1459-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 774589#L2987-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 774587#L198-2 [2022-07-14 15:49:30,315 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:30,315 INFO L85 PathProgramCache]: Analyzing trace with hash -609779873, now seen corresponding path program 1 times [2022-07-14 15:49:30,315 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:30,315 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [423086117] [2022-07-14 15:49:30,315 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:30,315 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:30,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:30,357 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:30,357 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:30,357 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [423086117] [2022-07-14 15:49:30,357 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [423086117] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:30,358 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:30,358 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:49:30,358 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1430944760] [2022-07-14 15:49:30,358 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:30,358 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:49:30,359 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:30,359 INFO L85 PathProgramCache]: Analyzing trace with hash -784682774, now seen corresponding path program 1 times [2022-07-14 15:49:30,359 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:30,359 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [376272504] [2022-07-14 15:49:30,359 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:30,359 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:30,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:30,375 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:30,376 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:30,376 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [376272504] [2022-07-14 15:49:30,376 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [376272504] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:30,376 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:30,376 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:49:30,376 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [712575055] [2022-07-14 15:49:30,377 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:30,377 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:49:30,377 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:49:30,378 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-14 15:49:30,378 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-14 15:49:30,378 INFO L87 Difference]: Start difference. First operand 48719 states and 90259 transitions. cyclomatic complexity: 41541 Second operand has 3 states, 3 states have (on average 16.333333333333332) internal successors, (49), 3 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:31,731 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:49:31,731 INFO L93 Difference]: Finished difference Result 91419 states and 168899 transitions. [2022-07-14 15:49:31,732 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-14 15:49:31,732 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 91419 states and 168899 transitions. [2022-07-14 15:49:32,087 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 21940 [2022-07-14 15:49:32,334 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 91419 states to 91419 states and 168899 transitions. [2022-07-14 15:49:32,334 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 91419 [2022-07-14 15:49:32,400 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 91419 [2022-07-14 15:49:32,400 INFO L73 IsDeterministic]: Start isDeterministic. Operand 91419 states and 168899 transitions. [2022-07-14 15:49:32,834 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:49:32,834 INFO L369 hiAutomatonCegarLoop]: Abstraction has 91419 states and 168899 transitions. [2022-07-14 15:49:32,880 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91419 states and 168899 transitions. [2022-07-14 15:49:33,811 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91419 to 91419. [2022-07-14 15:49:33,890 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91419 states, 91419 states have (on average 1.8475262254017217) internal successors, (168899), 91418 states have internal predecessors, (168899), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:34,063 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91419 states to 91419 states and 168899 transitions. [2022-07-14 15:49:34,063 INFO L392 hiAutomatonCegarLoop]: Abstraction has 91419 states and 168899 transitions. [2022-07-14 15:49:34,063 INFO L374 stractBuchiCegarLoop]: Abstraction has 91419 states and 168899 transitions. [2022-07-14 15:49:34,063 INFO L287 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2022-07-14 15:49:34,063 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 91419 states and 168899 transitions. [2022-07-14 15:49:34,271 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 21940 [2022-07-14 15:49:34,271 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:49:34,271 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:49:34,273 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:34,274 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:34,274 INFO L752 eck$LassoCheckResult]: Stem: 881377#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 881378#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 880887#L1866 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 880888#L1859 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 876899#L1874 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 876900#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 879881#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 878114#L702 assume { :end_inline_initFloors } true; 878115#L1942 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 879973#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 878605#L479 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 876868#L980 assume 0 == initPersonOnFloor_~floor#1; 876869#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 876220#L1088-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 881074#L772 assume !(0 == callOnFloor_~floorID#1); 881076#L775 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 877195#L784-2 assume { :end_inline_callOnFloor } true; 877196#L1124 assume { :end_inline_initPersonOnFloor } true; 879431#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 876433#L2102 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 876434#L2154 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 878382#L1315 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 878383#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 882396#L2119-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 885163#L2140-5 __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 880639#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 877071#L1421 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 877095#L709 assume !(0 == isFloorCalling_~floorID#1); 878882#L713 assume !(1 == isFloorCalling_~floorID#1); 878883#L717 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 876418#L736 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 878235#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 877263#L2119-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 877264#L2123-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 876883#L2140-10 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 876884#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 882196#L2727 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 882414#L2864 assume !(0 != timeShift_~tmp___9~3#1); 881751#L2955 assume !(1 == ~doorState~0); 880316#L2955-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 878923#L2306 assume !(1 == stopRequestedInDirection_~dir#1); 878924#L2475 assume !(0 == ~currentFloorID~0); 884097#L2481 assume ~currentFloorID~0 > 0; 881490#L2482 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 881491#L709-6 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 885418#L736-6 stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 879400#L2486 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 879401#L2628 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 886617#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 886615#L2682 assume !(1 == ~currentHeading~0); 886609#L2692 assume !(0 == ~currentFloorID~0); 886608#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 883803#L2698-1 assume { :end_inline_continueInDirection } true; 886604#L2972-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 886600#L1446 assume !(-1 == ~expectedDirection~0); 886595#L1458 assume !(1 == ~expectedDirection~0); 886593#L1459 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 886591#L2987 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 886589#L2102-1 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 886588#L2154-3 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 886586#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 886587#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 886605#L1387-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 886602#L1398-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 886597#L1409-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 886548#L1420-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 886547#L1421-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 886545#L709-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 886540#L736-21 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 886535#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 886536#L2119-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 886539#L2140-21 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 886537#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 886538#L2727-1 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 882843#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 882842#L2955-3 assume !(1 == ~doorState~0); 882839#L2955-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 882835#L2306-2 assume !(1 == stopRequestedInDirection_~dir#1); 882836#L2475-2 assume !(0 == ~currentFloorID~0); 882417#L2481-2 assume ~currentFloorID~0 > 0; 880139#L2482-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 879221#L709-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 879222#L736-27 stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 882219#L2486-2 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 883308#L2628-2 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 883307#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 883305#L2682-3 assume !(1 == ~currentHeading~0); 883134#L2692-9 assume !(0 == ~currentFloorID~0); 883116#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 883101#L2698-7 assume { :end_inline_continueInDirection } true; 883093#L2972-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 883094#L1446-1 assume !(-1 == ~expectedDirection~0); 883085#L1458-1 assume !(1 == ~expectedDirection~0); 883084#L1459-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 883079#L2987-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 883080#L2102-2 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 883075#L2154-6 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 883076#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 883060#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 883055#L1387-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 883047#L1398-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 883036#L1409-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 883030#L1420-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 883024#L1421-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 883022#L709-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 883021#L736-42 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 883019#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 883014#L2119-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 883015#L2140-32 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 890658#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 890655#L2727-2 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 890649#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 890645#L2955-6 assume !(1 == ~doorState~0); 890642#L2955-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 890636#L2306-4 assume !(1 == stopRequestedInDirection_~dir#1); 890637#L2475-4 assume !(0 == ~currentFloorID~0); 882481#L2481-4 assume ~currentFloorID~0 > 0; 882471#L2482-4 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 882472#L709-48 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 882474#L736-48 stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 882475#L2486-4 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 890617#L2628-4 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 890614#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 890613#L2682-6 assume !(1 == ~currentHeading~0); 890551#L2692-18 assume !(0 == ~currentFloorID~0); 890534#L2692-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 890529#L2698-13 assume { :end_inline_continueInDirection } true; 890528#L2972-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 890519#L1446-2 assume !(-1 == ~expectedDirection~0); 890520#L1458-2 assume !(1 == ~expectedDirection~0); 890511#L1459-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 890512#L2987-2 assume { :end_inline_timeShift } true; 890507#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 890508#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 922880#L479-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 922879#L980-1 assume 0 == initPersonOnFloor_~floor#1; 922864#L981-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 890457#L1088-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 890458#L772-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 922847#L784-5 assume { :end_inline_callOnFloor } true; 953518#L1124-1 assume { :end_inline_initPersonOnFloor } true; 953517#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 953516#L2102-3 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 953515#L2154-9 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 953514#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 953512#L1377-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 919504#L2119-38 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 919501#L2140-38 __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 919487#L1381-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 919483#L1421-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 919482#L709-63 assume !(0 == isFloorCalling_~floorID#1); 919480#L713-63 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 919473#L736-63 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 919469#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 919470#L2119-43 assume !(0 == buttonForFloorIsPressed_~floorID#1); 919476#L2123-43 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 919472#L2140-43 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 919471#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 919468#L2727-3 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 919465#L2864-6 assume !(0 != timeShift_~tmp___9~3#1); 882683#L2955-9 assume !(1 == ~doorState~0); 882681#L2955-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 882677#L2306-6 assume !(1 == stopRequestedInDirection_~dir#1); 882678#L2475-6 assume !(0 == ~currentFloorID~0); 914251#L2481-6 assume ~currentFloorID~0 > 0; 914249#L2482-6 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 882532#L709-69 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 882529#L736-69 stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 880203#L2486-6 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 877361#L2628-6 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 935179#L2963-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 935180#L2682-9 assume !(1 == ~currentHeading~0); 941902#L2692-27 assume !(0 == ~currentFloorID~0); 882273#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 876287#L2698-19 assume { :end_inline_continueInDirection } true; 876288#L2972-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 964041#L1446-3 assume !(-1 == ~expectedDirection~0); 964037#L1458-3 assume !(1 == ~expectedDirection~0); 964035#L1459-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 964034#L2987-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 964032#L198-2 [2022-07-14 15:49:34,275 INFO L754 eck$LassoCheckResult]: Loop: 964032#L198-2 assume !false; 964031#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 964026#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 964024#L1973 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 964023#L206 assume 1 != cleanup_~tmp___0~0#1; 964022#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 964021#L709-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 964020#L736-84 anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 913330#L2210 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 913324#L2274 isIdle_#t~ret67#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 913319#L2287 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 913317#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 913312#L2102-4 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 913313#L2154-12 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 957470#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 957468#L1377-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 911577#L2119-49 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 911569#L2140-49 __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 911559#L1381-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 911493#L1421-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 911480#L709-89 assume !(0 == isFloorCalling_~floorID#1); 907534#L713-89 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 907535#L736-89 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 915325#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 915326#L2119-54 assume !(0 == buttonForFloorIsPressed_~floorID#1); 915329#L2123-54 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 915328#L2140-54 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 915327#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 915324#L2727-4 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 915320#L2864-8 assume !(0 != timeShift_~tmp___9~3#1); 915321#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 916967#L2955-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 916965#L2306-8 assume !(1 == stopRequestedInDirection_~dir#1); 916966#L2475-8 assume !(0 == ~currentFloorID~0); 917098#L2481-8 assume ~currentFloorID~0 > 0; 917097#L2482-8 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 879603#L709-95 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 879604#L736-95 stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 882405#L2486-8 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 882439#L2628-8 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 964060#L2963-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 964058#L2682-12 assume !(1 == ~currentHeading~0); 964052#L2692-36 assume !(0 == ~currentFloorID~0); 964050#L2692-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 941814#L2698-25 assume { :end_inline_continueInDirection } true; 964049#L2972-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 964047#L1446-4 assume !(-1 == ~expectedDirection~0); 964044#L1458-4 assume !(1 == ~expectedDirection~0); 964039#L1459-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 964033#L2987-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 964032#L198-2 [2022-07-14 15:49:34,275 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:34,276 INFO L85 PathProgramCache]: Analyzing trace with hash -587122985, now seen corresponding path program 1 times [2022-07-14 15:49:34,276 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:34,276 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [584568874] [2022-07-14 15:49:34,276 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:34,276 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:34,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:34,315 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:34,315 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:34,315 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [584568874] [2022-07-14 15:49:34,315 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [584568874] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:34,315 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:34,316 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:49:34,316 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1865920412] [2022-07-14 15:49:34,316 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:34,316 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:49:34,317 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:34,317 INFO L85 PathProgramCache]: Analyzing trace with hash -606073184, now seen corresponding path program 1 times [2022-07-14 15:49:34,317 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:34,317 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2124846613] [2022-07-14 15:49:34,317 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:34,317 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:34,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:34,340 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:34,341 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:34,341 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2124846613] [2022-07-14 15:49:34,341 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2124846613] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:34,341 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:34,341 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-14 15:49:34,341 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1499274836] [2022-07-14 15:49:34,342 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:34,342 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:49:34,342 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:49:34,342 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-14 15:49:34,342 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-14 15:49:34,343 INFO L87 Difference]: Start difference. First operand 91419 states and 168899 transitions. cyclomatic complexity: 77481 Second operand has 5 states, 5 states have (on average 10.0) internal successors, (50), 5 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:35,506 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:49:35,506 INFO L93 Difference]: Finished difference Result 136727 states and 251267 transitions. [2022-07-14 15:49:35,507 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-14 15:49:35,507 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 136727 states and 251267 transitions. [2022-07-14 15:49:36,425 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 33356 [2022-07-14 15:49:36,777 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 136727 states to 136727 states and 251267 transitions. [2022-07-14 15:49:36,777 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 136727 [2022-07-14 15:49:36,862 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 136727 [2022-07-14 15:49:36,862 INFO L73 IsDeterministic]: Start isDeterministic. Operand 136727 states and 251267 transitions. [2022-07-14 15:49:36,933 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:49:36,933 INFO L369 hiAutomatonCegarLoop]: Abstraction has 136727 states and 251267 transitions. [2022-07-14 15:49:36,997 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 136727 states and 251267 transitions. [2022-07-14 15:49:38,226 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 136727 to 133999. [2022-07-14 15:49:38,332 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 133999 states, 133999 states have (on average 1.843707788864096) internal successors, (247055), 133998 states have internal predecessors, (247055), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:39,036 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 133999 states to 133999 states and 247055 transitions. [2022-07-14 15:49:39,036 INFO L392 hiAutomatonCegarLoop]: Abstraction has 133999 states and 247055 transitions. [2022-07-14 15:49:39,036 INFO L374 stractBuchiCegarLoop]: Abstraction has 133999 states and 247055 transitions. [2022-07-14 15:49:39,036 INFO L287 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2022-07-14 15:49:39,036 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 133999 states and 247055 transitions. [2022-07-14 15:49:39,385 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 32644 [2022-07-14 15:49:39,386 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:49:39,386 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:49:39,388 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:39,388 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:39,388 INFO L752 eck$LassoCheckResult]: Stem: 1109684#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1109685#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1109140#L1866 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1109141#L1859 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 1105060#L1874 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1105061#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1108087#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1106275#L702 assume { :end_inline_initFloors } true; 1106276#L1942 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1108189#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1106778#L479 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1105029#L980 assume 0 == initPersonOnFloor_~floor#1; 1105030#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1104386#L1088-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1109357#L772 assume !(0 == callOnFloor_~floorID#1); 1109359#L775 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1105355#L784-2 assume { :end_inline_callOnFloor } true; 1105356#L1124 assume { :end_inline_initPersonOnFloor } true; 1107620#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1107621#L2102 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1110896#L2154 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 1110897#L1315 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1110898#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1110552#L2119-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1109038#L2140-5 __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 1108882#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 1105234#L1421 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1109847#L709 assume !(0 == isFloorCalling_~floorID#1); 1109848#L713 assume !(1 == isFloorCalling_~floorID#1); 1110697#L717 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1104581#L736 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 1106403#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1106405#L2119-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1110619#L2123-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1107279#L2140-10 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 1110646#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1110647#L2727 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 1110921#L2864 assume !(0 != timeShift_~tmp___9~3#1); 1110922#L2955 assume !(1 == ~doorState~0); 1108548#L2955-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1108549#L2306 assume !(1 == stopRequestedInDirection_~dir#1); 1110473#L2475 assume !(0 == ~currentFloorID~0); 1110474#L2481 assume ~currentFloorID~0 > 0; 1109814#L2482 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1108658#L709-6 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1108659#L736-6 stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 1107591#L2486 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1106084#L2628 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1111444#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 1111445#L2682 assume !(1 == ~currentHeading~0); 1124487#L2692 assume !(0 == ~currentFloorID~0); 1124483#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1124481#L2698-1 assume { :end_inline_continueInDirection } true; 1124478#L2972-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 1124476#L1446 assume !(-1 == ~expectedDirection~0); 1124473#L1458 assume !(1 == ~expectedDirection~0); 1124471#L1459 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1124385#L2987 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1124382#L2102-1 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1124381#L2154-3 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 1124380#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1117082#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 1124371#L1387-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 1124369#L1398-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 1124356#L1409-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 1124354#L1420-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 1124353#L1421-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1124317#L709-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1124305#L736-21 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 1124299#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1124293#L2119-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1124294#L2140-21 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 1124978#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1124977#L2727-1 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 1124974#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 1124975#L2955-3 assume !(1 == ~doorState~0); 1127023#L2955-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1121728#L2306-2 assume !(1 == stopRequestedInDirection_~dir#1); 1121729#L2475-2 assume !(0 == ~currentFloorID~0); 1121724#L2481-2 assume ~currentFloorID~0 > 0; 1121720#L2482-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1121721#L709-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1121723#L736-27 stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 1121718#L2486-2 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1121719#L2628-2 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1126995#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 1126994#L2682-3 assume !(1 == ~currentHeading~0); 1126954#L2692-9 assume !(0 == ~currentFloorID~0); 1126953#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1126952#L2698-7 assume { :end_inline_continueInDirection } true; 1126948#L2972-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 1126819#L1446-1 assume !(-1 == ~expectedDirection~0); 1115323#L1458-1 assume !(1 == ~expectedDirection~0); 1115303#L1459-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1115293#L2987-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1114812#L2102-2 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1114813#L2154-6 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 1114808#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1114809#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 1114640#L1387-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 1114631#L1398-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 1114616#L1409-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 1114609#L1420-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 1114601#L1421-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1114602#L709-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1114596#L736-42 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 1114597#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1114590#L2119-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1114588#L2140-32 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 1114582#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1114584#L2727-2 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 1114572#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 1114573#L2955-6 assume !(1 == ~doorState~0); 1111212#L2955-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1111213#L2306-4 assume !(1 == stopRequestedInDirection_~dir#1); 1128529#L2475-4 assume !(0 == ~currentFloorID~0); 1128506#L2481-4 assume ~currentFloorID~0 > 0; 1128435#L2482-4 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1128433#L709-48 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1128370#L736-48 stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 1128313#L2486-4 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1128309#L2628-4 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1128305#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 1128303#L2682-6 assume !(1 == ~currentHeading~0); 1128301#L2692-18 assume !(0 == ~currentFloorID~0); 1128054#L2692-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1128051#L2698-13 assume { :end_inline_continueInDirection } true; 1128049#L2972-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 1128046#L1446-2 assume !(-1 == ~expectedDirection~0); 1128044#L1458-2 assume !(1 == ~expectedDirection~0); 1128042#L1459-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1128041#L2987-2 assume { :end_inline_timeShift } true; 1128040#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1128039#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1128033#L479-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1128032#L980-1 assume 0 == initPersonOnFloor_~floor#1; 1128015#L981-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1127998#L1088-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1127996#L772-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1127997#L784-5 assume { :end_inline_callOnFloor } true; 1212084#L1124-1 assume { :end_inline_initPersonOnFloor } true; 1209184#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1208922#L2102-3 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1129824#L2154-9 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 1111874#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1111770#L1377-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1111766#L2119-38 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1111762#L2140-38 __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 1111758#L1381-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 1111759#L1421-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1111754#L709-63 assume !(0 == isFloorCalling_~floorID#1); 1111755#L713-63 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1198897#L736-63 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 1198893#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1198894#L2119-43 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1198900#L2123-43 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1198896#L2140-43 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 1198895#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1198892#L2727-3 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 1198889#L2864-6 assume !(0 != timeShift_~tmp___9~3#1); 1111278#L2955-9 assume !(1 == ~doorState~0); 1111279#L2955-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1111273#L2306-6 assume !(1 == stopRequestedInDirection_~dir#1); 1111274#L2475-6 assume !(0 == ~currentFloorID~0); 1111534#L2481-6 assume ~currentFloorID~0 > 0; 1111533#L2482-6 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1111270#L709-69 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1111265#L736-69 stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 1111266#L2486-6 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1111495#L2628-6 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1111463#L2963-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 1111464#L2682-9 assume !(1 == ~currentHeading~0); 1184957#L2692-27 assume !(0 == ~currentFloorID~0); 1236553#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1184942#L2698-19 assume { :end_inline_continueInDirection } true; 1238009#L2972-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 1237722#L1446-3 assume !(-1 == ~expectedDirection~0); 1237715#L1458-3 assume !(1 == ~expectedDirection~0); 1237712#L1459-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1237710#L2987-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1237707#L198-2 [2022-07-14 15:49:39,389 INFO L754 eck$LassoCheckResult]: Loop: 1237707#L198-2 assume !false; 1237705#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1237703#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1237701#L1973 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1237699#L206 assume 1 != cleanup_~tmp___0~0#1; 1237698#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1237697#L709-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1237433#L736-84 anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 1110890#L2210 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1109900#L2274 isIdle_#t~ret67#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1109901#L2287 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1110718#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1186977#L2102-4 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1186978#L2154-12 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 1184597#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1170080#L1377-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1184509#L2119-49 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1162493#L2140-49 __utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 1162494#L1381-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 1160528#L1421-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1160529#L709-89 assume !(0 == isFloorCalling_~floorID#1); 1160513#L713-89 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1160514#L736-89 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 1188204#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1160507#L2119-54 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1160508#L2123-54 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1188057#L2140-54 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 1188058#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1193988#L2727-4 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 1111192#L2864-8 assume !(0 != timeShift_~tmp___9~3#1); 1111191#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1111190#L2955-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1111188#L2306-8 assume !(1 == stopRequestedInDirection_~dir#1); 1111187#L2475-8 assume !(0 == ~currentFloorID~0); 1111184#L2481-8 assume ~currentFloorID~0 > 0; 1111181#L2482-8 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1107809#L709-95 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1107810#L736-95 stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 1111182#L2486-8 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1111183#L2628-8 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1237743#L2963-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 1237742#L2682-12 assume !(1 == ~currentHeading~0); 1237741#L2692-36 assume !(0 == ~currentFloorID~0); 1106949#L2692-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1236114#L2698-25 assume { :end_inline_continueInDirection } true; 1237737#L2972-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 1237725#L1446-4 assume !(-1 == ~expectedDirection~0); 1237719#L1458-4 assume !(1 == ~expectedDirection~0); 1237717#L1459-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1237709#L2987-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1237707#L198-2 [2022-07-14 15:49:39,390 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:39,390 INFO L85 PathProgramCache]: Analyzing trace with hash 799662425, now seen corresponding path program 1 times [2022-07-14 15:49:39,390 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:39,390 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1772155673] [2022-07-14 15:49:39,390 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:39,390 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:39,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:39,428 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:39,428 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:39,428 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1772155673] [2022-07-14 15:49:39,428 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1772155673] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:39,428 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:39,429 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:49:39,429 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [63935871] [2022-07-14 15:49:39,429 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:39,429 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:49:39,430 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:39,430 INFO L85 PathProgramCache]: Analyzing trace with hash 1168934178, now seen corresponding path program 1 times [2022-07-14 15:49:39,430 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:39,430 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1294781799] [2022-07-14 15:49:39,430 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:39,430 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:39,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:39,446 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:39,447 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:39,447 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1294781799] [2022-07-14 15:49:39,447 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1294781799] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:39,447 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:39,447 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-14 15:49:39,447 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1336968875] [2022-07-14 15:49:39,447 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:39,448 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:49:39,448 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:49:39,448 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-14 15:49:39,448 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-14 15:49:39,448 INFO L87 Difference]: Start difference. First operand 133999 states and 247055 transitions. cyclomatic complexity: 113057 Second operand has 3 states, 3 states have (on average 16.666666666666668) internal successors, (50), 3 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:40,579 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-14 15:49:40,579 INFO L93 Difference]: Finished difference Result 195857 states and 360661 transitions. [2022-07-14 15:49:40,580 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-14 15:49:40,580 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 195857 states and 360661 transitions. [2022-07-14 15:49:41,235 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 47264 [2022-07-14 15:49:42,203 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 195857 states to 195857 states and 360661 transitions. [2022-07-14 15:49:42,204 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 195857 [2022-07-14 15:49:42,348 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 195857 [2022-07-14 15:49:42,349 INFO L73 IsDeterministic]: Start isDeterministic. Operand 195857 states and 360661 transitions. [2022-07-14 15:49:42,462 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-14 15:49:42,462 INFO L369 hiAutomatonCegarLoop]: Abstraction has 195857 states and 360661 transitions. [2022-07-14 15:49:42,558 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 195857 states and 360661 transitions. [2022-07-14 15:49:44,079 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 195857 to 191961. [2022-07-14 15:49:44,229 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 191961 states, 191961 states have (on average 1.8455259141179718) internal successors, (354269), 191960 states have internal predecessors, (354269), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-14 15:49:45,243 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 191961 states to 191961 states and 354269 transitions. [2022-07-14 15:49:45,244 INFO L392 hiAutomatonCegarLoop]: Abstraction has 191961 states and 354269 transitions. [2022-07-14 15:49:45,245 INFO L374 stractBuchiCegarLoop]: Abstraction has 191961 states and 354269 transitions. [2022-07-14 15:49:45,245 INFO L287 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2022-07-14 15:49:45,245 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 191961 states and 354269 transitions. [2022-07-14 15:49:45,674 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 46184 [2022-07-14 15:49:45,674 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-14 15:49:45,674 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-14 15:49:45,676 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:45,676 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-14 15:49:45,677 INFO L752 eck$LassoCheckResult]: Stem: 1439405#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1439406#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1438902#L1866 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1438903#L1859 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 1434922#L1874 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1434923#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1437901#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1436127#L702 assume { :end_inline_initFloors } true; 1436128#L1942 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1437995#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1436626#L479 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1434891#L980 assume 0 == initPersonOnFloor_~floor#1; 1434892#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1434249#L1088-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1439098#L772 assume !(0 == callOnFloor_~floorID#1); 1439100#L775 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1435214#L784-2 assume { :end_inline_callOnFloor } true; 1435215#L1124 assume { :end_inline_initPersonOnFloor } true; 1437455#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1434460#L2102 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1434461#L2154 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 1436402#L1315 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1436403#L1377 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 1438655#L1387 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 1435094#L1398 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 1436656#L1409 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 1436381#L1420 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 1435117#L1421 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1435118#L709 assume !(0 == isFloorCalling_~floorID#1); 1436902#L713 assume !(1 == isFloorCalling_~floorID#1); 1436903#L717 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1438981#L736 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 1438982#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1435283#L2119-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1435284#L2123-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1434904#L2140-10 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 1434905#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1440484#L2727 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 1440485#L2864 assume !(0 != timeShift_~tmp___9~3#1); 1439786#L2955 assume !(1 == ~doorState~0); 1439787#L2955-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1436946#L2306 assume !(1 == stopRequestedInDirection_~dir#1); 1436947#L2475 assume !(0 == ~currentFloorID~0); 1440053#L2481 assume ~currentFloorID~0 > 0; 1440055#L2482 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1440670#L709-6 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1439620#L736-6 stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 1439621#L2486 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1440671#L2628 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1480999#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 1480997#L2682 assume !(1 == ~currentHeading~0); 1480995#L2692 assume !(0 == ~currentFloorID~0); 1480988#L2692-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1480986#L2698-1 assume { :end_inline_continueInDirection } true; 1480982#L2972-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 1480978#L1446 assume !(-1 == ~expectedDirection~0); 1480976#L1458 assume !(1 == ~expectedDirection~0); 1472415#L1459 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1453854#L2987 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1453853#L2102-1 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1453852#L2154-3 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 1453851#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1452586#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 1453848#L1387-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 1453846#L1398-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 1453844#L1409-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 1453842#L1420-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 1453810#L1421-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1453807#L709-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1453806#L736-21 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 1453805#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1453596#L2119-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1453592#L2140-21 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 1453590#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1453589#L2727-1 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 1453587#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 1453586#L2955-3 assume !(1 == ~doorState~0); 1453585#L2955-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1453583#L2306-2 assume !(1 == stopRequestedInDirection_~dir#1); 1453584#L2475-2 assume !(0 == ~currentFloorID~0); 1461609#L2481-2 assume ~currentFloorID~0 > 0; 1461565#L2482-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1461566#L709-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1461602#L736-27 stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 1461562#L2486-2 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1461563#L2628-2 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1462210#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 1462282#L2682-3 assume !(1 == ~currentHeading~0); 1460160#L2692-9 assume !(0 == ~currentFloorID~0); 1446327#L2692-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1446198#L2698-7 assume { :end_inline_continueInDirection } true; 1462272#L2972-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 1462270#L1446-1 assume !(-1 == ~expectedDirection~0); 1462269#L1458-1 assume !(1 == ~expectedDirection~0); 1462081#L1459-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1448571#L2987-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1448570#L2102-2 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1446065#L2154-6 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 1445770#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1445771#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 1445697#L1387-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 1445695#L1398-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 1445693#L1409-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 1445691#L1420-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 1445686#L1421-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1445681#L709-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1445680#L736-42 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 1445679#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1445676#L2119-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1445673#L2140-32 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 1445671#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1445670#L2727-2 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 1445668#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 1445008#L2955-6 assume !(1 == ~doorState~0); 1445009#L2955-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1444818#L2306-4 assume !(1 == stopRequestedInDirection_~dir#1); 1444819#L2475-4 assume !(0 == ~currentFloorID~0); 1445896#L2481-4 assume ~currentFloorID~0 > 0; 1445894#L2482-4 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1445895#L709-48 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1445854#L736-48 stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 1445776#L2486-4 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1445773#L2628-4 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1536748#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 1536747#L2682-6 assume !(1 == ~currentHeading~0); 1445119#L2692-18 assume !(0 == ~currentFloorID~0); 1441365#L2692-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1441346#L2698-13 assume { :end_inline_continueInDirection } true; 1536744#L2972-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 1536735#L1446-2 assume !(-1 == ~expectedDirection~0); 1536736#L1458-2 assume !(1 == ~expectedDirection~0); 1536732#L1459-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1536731#L2987-2 assume { :end_inline_timeShift } true; 1536730#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1536729#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1536723#L479-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1536722#L980-1 assume 0 == initPersonOnFloor_~floor#1; 1526428#L981-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1526411#L1088-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1526333#L772-2 assume !(0 == callOnFloor_~floorID#1); 1526334#L775-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1555632#L784-5 assume { :end_inline_callOnFloor } true; 1526200#L1124-1 assume { :end_inline_initPersonOnFloor } true; 1524014#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1524012#L2102-3 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1524010#L2154-9 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 1524008#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1492335#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 1524003#L1387-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 1524001#L1398-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 1523999#L1409-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 1523992#L1420-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 1523991#L1421-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1523989#L709-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1523988#L736-63 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 1523987#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1503876#L2119-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1503877#L2140-43 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 1510534#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1510527#L2727-3 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 1510523#L2864-6 assume !(0 != timeShift_~tmp___9~3#1); 1510520#L2955-9 assume !(1 == ~doorState~0); 1510517#L2955-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1510512#L2306-6 assume !(1 == stopRequestedInDirection_~dir#1); 1510513#L2475-6 assume !(0 == ~currentFloorID~0); 1517283#L2481-6 assume ~currentFloorID~0 > 0; 1543440#L2482-6 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1543441#L709-69 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1543457#L736-69 stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 1543398#L2486-6 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1543378#L2628-6 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1543375#L2963-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 1543199#L2682-9 assume !(1 == ~currentHeading~0); 1543196#L2692-27 assume !(0 == ~currentFloorID~0); 1543188#L2692-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1543184#L2698-19 assume { :end_inline_continueInDirection } true; 1543180#L2972-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 1543178#L1446-3 assume !(-1 == ~expectedDirection~0); 1543173#L1458-3 assume !(1 == ~expectedDirection~0); 1542628#L1459-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1536813#L2987-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1536793#L198-2 [2022-07-14 15:49:45,677 INFO L754 eck$LassoCheckResult]: Loop: 1536793#L198-2 assume !false; 1536792#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1536791#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1536790#L1973 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1536789#L206 assume 1 != cleanup_~tmp___0~0#1; 1536757#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1536755#L709-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1526410#L736-84 anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 1526408#L2210 assume !(0 != anyStopRequested_~tmp___3~1#1); 1526375#L2214 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1526330#L709-85 assume !(0 == isFloorCalling_~floorID#1); 1526267#L713-85 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1526264#L736-85 anyStopRequested_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret63#1;havoc anyStopRequested_#t~ret63#1; 1521790#L2221 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1521761#L2274 isIdle_#t~ret67#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1521726#L2287 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1511019#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1511016#L2102-4 __utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1511007#L2154-12 __utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 1511002#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1504504#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 1510665#L1387-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 1510515#L1398-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 1510508#L1409-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 1510509#L1420-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 1509531#L1421-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1509532#L709-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1509524#L736-89 stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 1509525#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1524136#L2119-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1509503#L2140-54 stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 1509504#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1509498#L2727-4 timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 1509499#L2864-8 assume !(0 != timeShift_~tmp___9~3#1); 1509493#L2955-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1509492#L2955-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1509487#L2306-8 assume !(1 == stopRequestedInDirection_~dir#1); 1509488#L2475-8 assume !(0 == ~currentFloorID~0); 1542834#L2481-8 assume ~currentFloorID~0 > 0; 1542832#L2482-8 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1542833#L709-95 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1542874#L736-95 stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 1542743#L2486-8 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1542730#L2628-8 timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1542727#L2963-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 1542694#L2682-12 assume !(1 == ~currentHeading~0); 1542649#L2692-36 assume !(0 == ~currentFloorID~0); 1542640#L2692-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1542636#L2698-25 assume { :end_inline_continueInDirection } true; 1542632#L2972-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 1542630#L1446-4 assume !(-1 == ~expectedDirection~0); 1542627#L1458-4 assume !(1 == ~expectedDirection~0); 1542623#L1459-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1536812#L2987-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1536793#L198-2 [2022-07-14 15:49:45,678 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:45,678 INFO L85 PathProgramCache]: Analyzing trace with hash -275398064, now seen corresponding path program 1 times [2022-07-14 15:49:45,678 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:45,678 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [650331618] [2022-07-14 15:49:45,678 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:45,678 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:45,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:45,717 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:45,717 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:45,717 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [650331618] [2022-07-14 15:49:45,717 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [650331618] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:45,717 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:45,717 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:49:45,718 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1187310962] [2022-07-14 15:49:45,718 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:45,718 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-14 15:49:45,718 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-14 15:49:45,719 INFO L85 PathProgramCache]: Analyzing trace with hash 614506679, now seen corresponding path program 1 times [2022-07-14 15:49:45,719 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-14 15:49:45,719 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2121446969] [2022-07-14 15:49:45,719 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-14 15:49:45,719 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-14 15:49:45,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-14 15:49:45,738 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-14 15:49:45,739 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-14 15:49:45,739 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2121446969] [2022-07-14 15:49:45,739 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2121446969] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-14 15:49:45,739 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-14 15:49:45,739 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-14 15:49:45,739 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1192051471] [2022-07-14 15:49:45,740 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-14 15:49:45,740 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-14 15:49:45,740 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-14 15:49:45,740 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-14 15:49:45,740 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-14 15:49:45,741 INFO L87 Difference]: Start difference. First operand 191961 states and 354269 transitions. cyclomatic complexity: 162309 Second operand has 4 states, 4 states have (on average 13.5) internal successors, (54), 4 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)