./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product09.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version a0165632 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6f6987e3-b756-4951-b4fd-e7505655699b/bin/uautomizer-verify-jihMAELWvX/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6f6987e3-b756-4951-b4fd-e7505655699b/bin/uautomizer-verify-jihMAELWvX/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6f6987e3-b756-4951-b4fd-e7505655699b/bin/uautomizer-verify-jihMAELWvX/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6f6987e3-b756-4951-b4fd-e7505655699b/bin/uautomizer-verify-jihMAELWvX/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product09.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6f6987e3-b756-4951-b4fd-e7505655699b/bin/uautomizer-verify-jihMAELWvX/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6f6987e3-b756-4951-b4fd-e7505655699b/bin/uautomizer-verify-jihMAELWvX --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 67b10dcf95f436cfd8f02a55d7d1d272656f1382a4eb6ab4ad3bba992e95e024 --- Real Ultimate output --- This is Ultimate 0.2.5-dev-a016563 [2024-11-08 17:36:37,580 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-08 17:36:37,689 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6f6987e3-b756-4951-b4fd-e7505655699b/bin/uautomizer-verify-jihMAELWvX/config/svcomp-Termination-32bit-Automizer_Default.epf [2024-11-08 17:36:37,697 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-08 17:36:37,698 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-08 17:36:37,743 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-08 17:36:37,744 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-08 17:36:37,744 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-08 17:36:37,745 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-08 17:36:37,746 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-08 17:36:37,747 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-08 17:36:37,748 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-08 17:36:37,748 INFO L153 SettingsManager]: * Use SBE=true [2024-11-08 17:36:37,749 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2024-11-08 17:36:37,751 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2024-11-08 17:36:37,752 INFO L153 SettingsManager]: * Use old map elimination=false [2024-11-08 17:36:37,752 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2024-11-08 17:36:37,753 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2024-11-08 17:36:37,753 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2024-11-08 17:36:37,754 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-08 17:36:37,754 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2024-11-08 17:36:37,758 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-08 17:36:37,759 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-08 17:36:37,759 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-08 17:36:37,759 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-08 17:36:37,760 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2024-11-08 17:36:37,760 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2024-11-08 17:36:37,760 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2024-11-08 17:36:37,761 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-08 17:36:37,761 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2024-11-08 17:36:37,761 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-08 17:36:37,762 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-08 17:36:37,762 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2024-11-08 17:36:37,763 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-08 17:36:37,763 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-08 17:36:37,764 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-08 17:36:37,765 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-08 17:36:37,765 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-08 17:36:37,766 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2024-11-08 17:36:37,766 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6f6987e3-b756-4951-b4fd-e7505655699b/bin/uautomizer-verify-jihMAELWvX/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6f6987e3-b756-4951-b4fd-e7505655699b/bin/uautomizer-verify-jihMAELWvX Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 67b10dcf95f436cfd8f02a55d7d1d272656f1382a4eb6ab4ad3bba992e95e024 [2024-11-08 17:36:38,065 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-08 17:36:38,090 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-08 17:36:38,094 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-08 17:36:38,096 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-08 17:36:38,096 INFO L274 PluginConnector]: CDTParser initialized [2024-11-08 17:36:38,098 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6f6987e3-b756-4951-b4fd-e7505655699b/bin/uautomizer-verify-jihMAELWvX/../../sv-benchmarks/c/product-lines/elevator_spec3_product09.cil.c Unable to find full path for "g++" [2024-11-08 17:36:40,083 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-08 17:36:40,497 INFO L384 CDTParser]: Found 1 translation units. [2024-11-08 17:36:40,498 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6f6987e3-b756-4951-b4fd-e7505655699b/sv-benchmarks/c/product-lines/elevator_spec3_product09.cil.c [2024-11-08 17:36:40,528 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6f6987e3-b756-4951-b4fd-e7505655699b/bin/uautomizer-verify-jihMAELWvX/data/b2c0119f6/b34610e862f2442a994e0dc00300285d/FLAG29e65700f [2024-11-08 17:36:40,550 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6f6987e3-b756-4951-b4fd-e7505655699b/bin/uautomizer-verify-jihMAELWvX/data/b2c0119f6/b34610e862f2442a994e0dc00300285d [2024-11-08 17:36:40,554 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-08 17:36:40,557 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-08 17:36:40,561 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-08 17:36:40,561 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-08 17:36:40,567 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-08 17:36:40,569 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.11 05:36:40" (1/1) ... [2024-11-08 17:36:40,570 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@309a47aa and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 05:36:40, skipping insertion in model container [2024-11-08 17:36:40,570 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.11 05:36:40" (1/1) ... [2024-11-08 17:36:40,659 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-08 17:36:41,318 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-08 17:36:41,343 INFO L200 MainTranslator]: Completed pre-run [2024-11-08 17:36:41,356 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [48] [2024-11-08 17:36:41,358 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [147] [2024-11-08 17:36:41,359 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [165] [2024-11-08 17:36:41,359 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [832] [2024-11-08 17:36:41,359 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [952] [2024-11-08 17:36:41,360 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [961] [2024-11-08 17:36:41,361 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [2404] [2024-11-08 17:36:41,361 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [2442] [2024-11-08 17:36:41,361 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [2790] [2024-11-08 17:36:41,361 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [2976] [2024-11-08 17:36:41,530 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-08 17:36:41,568 INFO L204 MainTranslator]: Completed translation [2024-11-08 17:36:41,568 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 05:36:41 WrapperNode [2024-11-08 17:36:41,568 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-08 17:36:41,569 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-08 17:36:41,570 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-08 17:36:41,570 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-08 17:36:41,577 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 05:36:41" (1/1) ... [2024-11-08 17:36:41,620 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 05:36:41" (1/1) ... [2024-11-08 17:36:42,009 INFO L138 Inliner]: procedures = 87, calls = 337, calls flagged for inlining = 190, calls inlined = 623, statements flattened = 20585 [2024-11-08 17:36:42,009 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-08 17:36:42,010 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-08 17:36:42,010 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-08 17:36:42,010 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-08 17:36:42,036 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 05:36:41" (1/1) ... [2024-11-08 17:36:42,037 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 05:36:41" (1/1) ... [2024-11-08 17:36:42,151 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 05:36:41" (1/1) ... [2024-11-08 17:36:42,286 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4, 4, 4, 4, 2]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4, 4, 4, 4, 2]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2024-11-08 17:36:42,287 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 05:36:41" (1/1) ... [2024-11-08 17:36:42,288 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 05:36:41" (1/1) ... [2024-11-08 17:36:42,518 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 05:36:41" (1/1) ... [2024-11-08 17:36:42,635 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 05:36:41" (1/1) ... [2024-11-08 17:36:42,656 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 05:36:41" (1/1) ... [2024-11-08 17:36:42,681 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 05:36:41" (1/1) ... [2024-11-08 17:36:42,749 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-08 17:36:42,750 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-08 17:36:42,750 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-08 17:36:42,750 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-08 17:36:42,751 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 05:36:41" (1/1) ... [2024-11-08 17:36:42,758 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-08 17:36:42,772 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6f6987e3-b756-4951-b4fd-e7505655699b/bin/uautomizer-verify-jihMAELWvX/z3 [2024-11-08 17:36:42,787 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6f6987e3-b756-4951-b4fd-e7505655699b/bin/uautomizer-verify-jihMAELWvX/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-08 17:36:42,794 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6f6987e3-b756-4951-b4fd-e7505655699b/bin/uautomizer-verify-jihMAELWvX/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2024-11-08 17:36:42,828 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-08 17:36:42,829 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-08 17:36:42,829 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-11-08 17:36:42,829 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-11-08 17:36:42,829 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-11-08 17:36:42,829 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-11-08 17:36:42,829 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-11-08 17:36:42,830 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2024-11-08 17:36:42,830 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2024-11-08 17:36:42,830 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2024-11-08 17:36:42,830 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2024-11-08 17:36:42,832 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2024-11-08 17:36:42,832 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2024-11-08 17:36:42,832 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2024-11-08 17:36:42,832 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2024-11-08 17:36:42,833 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2024-11-08 17:36:42,833 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2024-11-08 17:36:42,833 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2024-11-08 17:36:42,833 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2024-11-08 17:36:42,833 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2024-11-08 17:36:42,833 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2024-11-08 17:36:42,833 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-08 17:36:42,834 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-08 17:36:43,097 INFO L238 CfgBuilder]: Building ICFG [2024-11-08 17:36:43,100 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-08 17:36:55,321 INFO L? ?]: Removed 9450 outVars from TransFormulas that were not future-live. [2024-11-08 17:36:55,321 INFO L287 CfgBuilder]: Performing block encoding [2024-11-08 17:36:55,431 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-08 17:36:55,431 INFO L316 CfgBuilder]: Removed 1 assume(true) statements. [2024-11-08 17:36:55,431 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.11 05:36:55 BoogieIcfgContainer [2024-11-08 17:36:55,432 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-08 17:36:55,433 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2024-11-08 17:36:55,433 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2024-11-08 17:36:55,436 INFO L274 PluginConnector]: BuchiAutomizer initialized [2024-11-08 17:36:55,437 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-08 17:36:55,438 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 08.11 05:36:40" (1/3) ... [2024-11-08 17:36:55,439 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@6bbdc0c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 08.11 05:36:55, skipping insertion in model container [2024-11-08 17:36:55,439 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-08 17:36:55,439 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.11 05:36:41" (2/3) ... [2024-11-08 17:36:55,439 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@6bbdc0c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 08.11 05:36:55, skipping insertion in model container [2024-11-08 17:36:55,439 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-08 17:36:55,440 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.11 05:36:55" (3/3) ... [2024-11-08 17:36:55,441 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product09.cil.c [2024-11-08 17:36:55,576 INFO L300 stractBuchiCegarLoop]: Interprodecural is true [2024-11-08 17:36:55,576 INFO L301 stractBuchiCegarLoop]: Hoare is None [2024-11-08 17:36:55,576 INFO L302 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2024-11-08 17:36:55,576 INFO L303 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2024-11-08 17:36:55,576 INFO L304 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2024-11-08 17:36:55,577 INFO L305 stractBuchiCegarLoop]: Difference is false [2024-11-08 17:36:55,577 INFO L306 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2024-11-08 17:36:55,577 INFO L310 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2024-11-08 17:36:55,599 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6003 states, 6002 states have (on average 1.8760413195601466) internal successors, (11260), 6002 states have internal predecessors, (11260), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:36:55,762 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1216 [2024-11-08 17:36:55,762 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 17:36:55,762 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 17:36:55,790 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:36:55,791 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:36:55,791 INFO L332 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2024-11-08 17:36:55,807 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6003 states, 6002 states have (on average 1.8760413195601466) internal successors, (11260), 6002 states have internal predecessors, (11260), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:36:55,889 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1216 [2024-11-08 17:36:55,890 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 17:36:55,890 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 17:36:55,896 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:36:55,899 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:36:55,912 INFO L745 eck$LassoCheckResult]: Stem: 194#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 5878#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 4163#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 3726#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 845#valid_product_returnLabel#1true main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 860#L2777true assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 1950#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 42#initFloors_returnLabel#1true assume { :end_inline_initFloors } true; 1154#initTopDown_returnLabel#1true assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 3245#L878true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 3236#getOrigin_returnLabel#1true bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 4911#L525true assume 0 == initPersonOnFloor_~floor#1; 4859#L526true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2142#L633-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 927#L317true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 3644#L329-2true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1246#initPersonOnFloor_returnLabel#1true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 3569#bobCall_returnLabel#1true havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 4366#getCurrentFloorID_returnLabel#1true __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 3146#getCurrentHeading_returnLabel#1true __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 3351#L2814true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 5163#L2876true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 4391#L1201-5true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 394#buttonForFloorIsPressed_returnLabel#6true __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 683#L2880true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 20#L2920true havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 4206#L254true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 3108#isFloorCalling_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 121#L1797true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 303#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 4315#L1948true assume !(0 != timeShift_~tmp___9~2#1); 3237#L2039true assume !(1 == ~doorState~0); 5960#L2039-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1937#L1388true assume !(1 == stopRequestedInDirection_~dir#1); 4820#L1557true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 2105#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 445#L2047true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1529#L1764true assume !(1 == ~currentHeading~0); 5124#L1774true assume !(0 == ~currentFloorID~0); 2792#L1774-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4508#L1780-1true havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1691#L2056-2true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1549#L2945true assume !(-1 == ~expectedDirection~0); 4983#$Ultimate##2627true assume !(1 == ~expectedDirection~0); 5942#L2958true havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 5507#timeShift_returnLabel#1true havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 4738#getCurrentFloorID_returnLabel#2true __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 5167#getCurrentHeading_returnLabel#4true __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 5306#L2814-1true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 5411#L2876-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 3431#L1201-16true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 5086#buttonForFloorIsPressed_returnLabel#17true __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 3935#L2880-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 4763#L2920-1true havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1802#L254-21true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1808#isFloorCalling_returnLabel#22true stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 5316#L1797-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 2558#stopRequestedAtCurrentFloor_returnLabel#2true timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 4358#L1948-2true assume !(0 != timeShift_~tmp___9~2#1); 4040#L2039-3true assume !(1 == ~doorState~0); 4674#L2039-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 3020#L1388-2true assume !(1 == stopRequestedInDirection_~dir#1); 964#L1557-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1440#stopRequestedInDirection_returnLabel#3true timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 786#L2047-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 4956#L1764-3true assume !(1 == ~currentHeading~0); 5644#L1774-9true assume !(0 == ~currentFloorID~0); 748#L1774-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1709#L1780-7true havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1136#L2056-5true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 2803#L2945-1true assume !(-1 == ~expectedDirection~0); 3075#$Ultimate##5124true assume !(1 == ~expectedDirection~0); 5219#L2958-1true havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 2516#timeShift_returnLabel#2true havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 5645#getCurrentFloorID_returnLabel#3true __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 2698#getCurrentHeading_returnLabel#7true __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1023#L2814-2true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 3465#L2876-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 536#L1201-27true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 5299#buttonForFloorIsPressed_returnLabel#28true __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 3142#L2880-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 3889#L2920-2true havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1580#L254-42true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1960#isFloorCalling_returnLabel#43true stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 5217#L1797-2true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 799#stopRequestedAtCurrentFloor_returnLabel#3true timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 5396#L1948-4true assume !(0 != timeShift_~tmp___9~2#1); 163#L2039-6true assume !(1 == ~doorState~0); 1270#L2039-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 3341#L1388-4true assume !(1 == stopRequestedInDirection_~dir#1); 4467#L1557-4true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 2495#stopRequestedInDirection_returnLabel#5true timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 5392#L2047-4true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 5191#L1764-6true assume !(1 == ~currentHeading~0); 1979#L1774-18true assume !(0 == ~currentFloorID~0); 739#L1774-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2373#L1780-13true havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 4977#L2056-8true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 4843#L2945-2true assume !(-1 == ~expectedDirection~0); 4574#$Ultimate##7621true assume !(1 == ~expectedDirection~0); 3574#L2958-2true havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 355#timeShift_returnLabel#3true havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 74#threeTS_returnLabel#1true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 5733#L878-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 483#getOrigin_returnLabel#2true bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5303#L525-1true assume 0 == initPersonOnFloor_~floor#1; 2197#L526-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 4353#L633-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 5689#L317-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 5369#L329-5true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 4274#initPersonOnFloor_returnLabel#2true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1581#bobCall_returnLabel#2true havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 5764#getCurrentFloorID_returnLabel#4true __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 3484#getCurrentHeading_returnLabel#10true __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 587#L2814-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 542#L2815-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 712#L1201-33true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 867#buttonForFloorIsPressed_returnLabel#34true __utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 261#L2819-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 321#L2920-3true havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 3446#L254-63true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1494#isFloorCalling_returnLabel#64true stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 780#L1797-3true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 4545#stopRequestedAtCurrentFloor_returnLabel#4true timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 2164#L1948-6true assume !(0 != timeShift_~tmp___9~2#1); 2184#L2039-9true assume !(1 == ~doorState~0); 5421#L2039-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 3315#L1388-6true assume !(1 == stopRequestedInDirection_~dir#1); 209#L1557-6true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 2362#stopRequestedInDirection_returnLabel#7true timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 928#L2047-6true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2762#L1764-9true assume !(1 == ~currentHeading~0); 5226#L1774-27true assume !(0 == ~currentFloorID~0); 359#L1774-29true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3438#L1780-19true havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1905#L2056-11true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 776#L2945-3true assume !(-1 == ~expectedDirection~0); 49#$Ultimate##10250true assume !(1 == ~expectedDirection~0); 1976#L2958-3true havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 5451#timeShift_returnLabel#4true havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 2551#L2586-2true [2024-11-08 17:36:55,924 INFO L747 eck$LassoCheckResult]: Loop: 2551#L2586-2true assume !false; 3307#L2587true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 515#L2590true assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 4144#isBlocked_returnLabel#1true cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 2003#L2594true assume 1 != cleanup_~tmp___0~8#1; 2302#L2594-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 5304#L254-84true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 5263#isFloorCalling_returnLabel#85true anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 5139#L1292true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 168#anyStopRequested_returnLabel#1true isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1391#isIdle_returnLabel#1true cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 3007#L2606true assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1336#getCurrentFloorID_returnLabel#5true __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1255#getCurrentHeading_returnLabel#13true __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 5309#L2814-4true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 3370#L2876-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1728#L1201-49true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 3946#buttonForFloorIsPressed_returnLabel#50true __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 4049#L2880-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 3509#L2920-4true havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 509#L254-89true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 169#isFloorCalling_returnLabel#90true stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 3913#L1797-4true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1452#stopRequestedAtCurrentFloor_returnLabel#5true timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 330#L1948-8true assume !(0 != timeShift_~tmp___9~2#1); 4774#L2039-12true assume 1 == ~doorState~0;~doorState~0 := 0; 4422#L2039-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 5716#L1388-8true assume !(1 == stopRequestedInDirection_~dir#1); 4434#L1557-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 5214#stopRequestedInDirection_returnLabel#9true timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1012#L2047-8true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 4607#L1764-12true assume !(1 == ~currentHeading~0); 5797#L1774-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4180#L1774-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5752#L1780-25true havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1472#L2056-14true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 5029#L2945-4true assume !(-1 == ~expectedDirection~0); 1628#$Ultimate##12830true assume !(1 == ~expectedDirection~0); 1150#L2958-4true havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 3677#timeShift_returnLabel#5true havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 2551#L2586-2true [2024-11-08 17:36:55,935 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:36:55,939 INFO L85 PathProgramCache]: Analyzing trace with hash 11445467, now seen corresponding path program 1 times [2024-11-08 17:36:55,950 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:36:55,950 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [364981136] [2024-11-08 17:36:55,951 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:36:55,951 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:36:56,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:36:56,834 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:36:56,835 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:36:56,835 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [364981136] [2024-11-08 17:36:56,836 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [364981136] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:36:56,837 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:36:56,837 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 17:36:56,839 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [660723414] [2024-11-08 17:36:56,840 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:36:56,846 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 17:36:56,848 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:36:56,848 INFO L85 PathProgramCache]: Analyzing trace with hash -367726793, now seen corresponding path program 1 times [2024-11-08 17:36:56,849 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:36:56,849 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2041161672] [2024-11-08 17:36:56,850 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:36:56,850 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:36:56,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:36:57,035 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:36:57,037 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:36:57,037 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2041161672] [2024-11-08 17:36:57,037 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2041161672] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:36:57,038 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:36:57,038 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-08 17:36:57,038 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1155952067] [2024-11-08 17:36:57,038 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:36:57,039 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 17:36:57,041 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 17:36:57,082 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-08 17:36:57,082 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-08 17:36:57,100 INFO L87 Difference]: Start difference. First operand has 6003 states, 6002 states have (on average 1.8760413195601466) internal successors, (11260), 6002 states have internal predecessors, (11260), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 6 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:03,805 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 17:37:03,805 INFO L93 Difference]: Finished difference Result 10023 states and 18639 transitions. [2024-11-08 17:37:03,806 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 10023 states and 18639 transitions. [2024-11-08 17:37:03,905 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2237 [2024-11-08 17:37:03,980 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 10023 states to 9989 states and 18600 transitions. [2024-11-08 17:37:03,981 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9989 [2024-11-08 17:37:03,996 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9989 [2024-11-08 17:37:03,996 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9989 states and 18600 transitions. [2024-11-08 17:37:04,030 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 17:37:04,031 INFO L218 hiAutomatonCegarLoop]: Abstraction has 9989 states and 18600 transitions. [2024-11-08 17:37:04,065 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9989 states and 18600 transitions. [2024-11-08 17:37:04,286 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9989 to 9944. [2024-11-08 17:37:04,309 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9944 states, 9944 states have (on average 1.8635358004827032) internal successors, (18531), 9943 states have internal predecessors, (18531), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:04,346 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9944 states to 9944 states and 18531 transitions. [2024-11-08 17:37:04,347 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9944 states and 18531 transitions. [2024-11-08 17:37:04,349 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-11-08 17:37:04,352 INFO L425 stractBuchiCegarLoop]: Abstraction has 9944 states and 18531 transitions. [2024-11-08 17:37:04,353 INFO L332 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2024-11-08 17:37:04,353 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9944 states and 18531 transitions. [2024-11-08 17:37:04,534 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2226 [2024-11-08 17:37:04,535 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 17:37:04,535 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 17:37:04,539 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:37:04,539 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:37:04,540 INFO L745 eck$LassoCheckResult]: Stem: 16539#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 16540#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 21657#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 21387#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 17881#valid_product_returnLabel#1 main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 17882#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 17906#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 16157#initFloors_returnLabel#1 assume { :end_inline_initFloors } true; 16158#initTopDown_returnLabel#1 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 18419#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 17279#getOrigin_returnLabel#1 bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 20991#L525 assume 0 == initPersonOnFloor_~floor#1; 21988#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 16048#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 18030#L317 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 18031#L329-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 18572#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 18573#bobCall_returnLabel#1 havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 21270#getCurrentFloorID_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 20900#getCurrentHeading_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 20901#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 21094#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 21771#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 16997#buttonForFloorIsPressed_returnLabel#6 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 16998#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 16097#L2920 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 16098#L254 assume !(0 == isFloorCalling_~floorID#1); 21297#L258 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 16923#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 16364#L1797 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 16365#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 16789#L1948 assume !(0 != timeShift_~tmp___9~2#1); 20992#L2039 assume !(1 == ~doorState~0); 20993#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 19600#L1388 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 19602#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 16985#L1392 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 16454#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 17109#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 17111#L1764 assume !(1 == ~currentHeading~0); 19021#L1774 assume !(0 == ~currentFloorID~0); 20573#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 20574#L1780-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 19260#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 19050#L2945 assume !(-1 == ~expectedDirection~0); 19052#$Ultimate##2627 assume !(1 == ~expectedDirection~0); 18575#L2958 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 22158#timeShift_returnLabel#1 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 21929#getCurrentFloorID_returnLabel#2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 21930#getCurrentHeading_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 22075#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 22111#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 19935#$Ultimate##2732 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 19937#$Ultimate##2748 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 21388#$Ultimate##2764 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 22198#$Ultimate##2780 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 19522#L2920-1 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 19416#L254-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 16991#isFloorCalling_returnLabel#22 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 19423#L1797-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 19478#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 20334#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 21757#L2039-3 assume !(1 == ~doorState~0); 22473#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 20787#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 20788#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 16854#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 18881#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 22023#L1764-3 assume !(1 == ~currentHeading~0); 22024#L1774-9 assume !(0 == ~currentFloorID~0); 16921#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 17712#L1780-7 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 18390#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 18391#L2945-1 assume !(-1 == ~expectedDirection~0); 20585#$Ultimate##5124 assume !(1 == ~expectedDirection~0); 20551#L2958-1 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 20291#timeShift_returnLabel#2 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 20292#getCurrentFloorID_returnLabel#3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 20469#getCurrentHeading_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 18201#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 18202#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 21189#$Ultimate##5229 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 18942#$Ultimate##5245 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 18944#$Ultimate##5261 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 19107#$Ultimate##5277 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 18262#L2920-2 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 22332#L254-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 22328#isFloorCalling_returnLabel#43 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 22322#L1797-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 22321#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 22319#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 22318#L2039-6 assume !(1 == ~doorState~0); 22302#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 22295#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 22281#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 22276#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 22275#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 22083#L1764-6 assume !(1 == ~currentHeading~0); 22084#L1774-18 assume !(0 == ~currentFloorID~0); 17695#L1774-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 17696#L1780-13 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 20148#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 22032#L2945-2 assume !(-1 == ~expectedDirection~0); 21861#$Ultimate##7621 assume !(1 == ~expectedDirection~0); 16457#L2958-2 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 22566#timeShift_returnLabel#3 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 22564#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 22562#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 22555#getOrigin_returnLabel#2 bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 22553#L525-1 assume 0 == initPersonOnFloor_~floor#1; 22552#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 22521#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 22520#L317-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 22515#L329-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 22514#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 19110#bobCall_returnLabel#2 havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 19111#getCurrentFloorID_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 22193#getCurrentHeading_returnLabel#10 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 22512#L2814-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 22511#L2815-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 20927#$Ultimate##7777 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 20929#L1201-34 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 22506#buttonForFloorIsPressed_returnLabel#35 __utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 22504#L2830-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 16825#L2920-3 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 16826#L254-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 22398#isFloorCalling_returnLabel#64 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 22396#L1797-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 22395#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 22394#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 22393#L2039-9 assume !(1 == ~doorState~0); 22392#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 21060#L1388-6 assume !(1 == stopRequestedInDirection_~dir#1); 21061#L1557-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 16918#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 18033#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 18035#L1764-9 assume !(1 == ~currentHeading~0); 22449#L1774-27 assume !(0 == ~currentFloorID~0); 16915#L1774-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 16916#L1780-19 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 19487#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 22665#L2945-3 assume !(-1 == ~expectedDirection~0); 22660#$Ultimate##10250 assume !(1 == ~expectedDirection~0); 22657#L2958-3 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 22656#timeShift_returnLabel#4 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 22654#L2586-2 [2024-11-08 17:37:04,541 INFO L747 eck$LassoCheckResult]: Loop: 22654#L2586-2 assume !false; 22653#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 22652#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 22651#isBlocked_returnLabel#1 cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 22650#L2594 assume 1 != cleanup_~tmp___0~8#1; 22649#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 22642#L254-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 22638#isFloorCalling_returnLabel#85 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 22621#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 22616#anyStopRequested_returnLabel#1 isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 22615#isIdle_returnLabel#1 cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 20774#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 18712#getCurrentFloorID_returnLabel#5 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 18587#getCurrentHeading_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 18588#L2814-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 19902#L2815-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 19904#$Ultimate##10357 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 20576#L1201-45 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 18538#buttonForFloorIsPressed_returnLabel#46 __utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 22592#L2830-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 22590#L2920-4 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 22589#L254-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 16479#isFloorCalling_returnLabel#90 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 16480#L1797-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 17051#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 16845#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 16846#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 25105#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 25104#L1388-8 assume !(1 == stopRequestedInDirection_~dir#1); 25060#L1557-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 25055#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 25054#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 21880#L1764-12 assume !(1 == ~currentHeading~0); 21881#L1774-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 20234#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 21664#L1780-25 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 19263#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 22669#L2945-4 assume !(-1 == ~expectedDirection~0); 22662#$Ultimate##12830 assume !(1 == ~expectedDirection~0); 22658#L2958-4 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 22655#timeShift_returnLabel#5 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 22654#L2586-2 [2024-11-08 17:37:04,542 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:37:04,543 INFO L85 PathProgramCache]: Analyzing trace with hash 1435801869, now seen corresponding path program 1 times [2024-11-08 17:37:04,543 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:37:04,543 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1198820522] [2024-11-08 17:37:04,543 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:37:04,544 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:37:04,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:37:04,834 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:37:04,835 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:37:04,835 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1198820522] [2024-11-08 17:37:04,835 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1198820522] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:37:04,835 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:37:04,836 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 17:37:04,836 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [175426522] [2024-11-08 17:37:04,836 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:37:04,836 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 17:37:04,837 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:37:04,837 INFO L85 PathProgramCache]: Analyzing trace with hash -1403259197, now seen corresponding path program 1 times [2024-11-08 17:37:04,838 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:37:04,838 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2094155309] [2024-11-08 17:37:04,838 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:37:04,838 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:37:04,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:37:04,929 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:37:04,930 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:37:04,930 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2094155309] [2024-11-08 17:37:04,930 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2094155309] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:37:04,930 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:37:04,930 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 17:37:04,931 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1890238509] [2024-11-08 17:37:04,931 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:37:04,931 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 17:37:04,931 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 17:37:04,932 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-08 17:37:04,932 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-08 17:37:04,932 INFO L87 Difference]: Start difference. First operand 9944 states and 18531 transitions. cyclomatic complexity: 8588 Second operand has 4 states, 4 states have (on average 10.25) internal successors, (41), 4 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:06,131 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 17:37:06,131 INFO L93 Difference]: Finished difference Result 9946 states and 18477 transitions. [2024-11-08 17:37:06,131 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9946 states and 18477 transitions. [2024-11-08 17:37:06,193 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2228 [2024-11-08 17:37:06,247 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9946 states to 9946 states and 18477 transitions. [2024-11-08 17:37:06,247 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9946 [2024-11-08 17:37:06,260 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9946 [2024-11-08 17:37:06,261 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9946 states and 18477 transitions. [2024-11-08 17:37:06,277 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 17:37:06,278 INFO L218 hiAutomatonCegarLoop]: Abstraction has 9946 states and 18477 transitions. [2024-11-08 17:37:06,292 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9946 states and 18477 transitions. [2024-11-08 17:37:06,439 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9946 to 9944. [2024-11-08 17:37:06,458 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9944 states, 9944 states have (on average 1.8579042638777152) internal successors, (18475), 9943 states have internal predecessors, (18475), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:06,485 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9944 states to 9944 states and 18475 transitions. [2024-11-08 17:37:06,485 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9944 states and 18475 transitions. [2024-11-08 17:37:06,486 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-08 17:37:06,487 INFO L425 stractBuchiCegarLoop]: Abstraction has 9944 states and 18475 transitions. [2024-11-08 17:37:06,487 INFO L332 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2024-11-08 17:37:06,487 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9944 states and 18475 transitions. [2024-11-08 17:37:06,540 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2226 [2024-11-08 17:37:06,541 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 17:37:06,541 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 17:37:06,546 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:37:06,546 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:37:06,547 INFO L745 eck$LassoCheckResult]: Stem: 36437#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 36438#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 41488#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 41232#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 37775#valid_product_returnLabel#1 main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 37776#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 37800#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 36056#initFloors_returnLabel#1 assume { :end_inline_initFloors } true; 36057#initTopDown_returnLabel#1 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 38309#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 37170#getOrigin_returnLabel#1 bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 40857#L525 assume 0 == initPersonOnFloor_~floor#1; 41794#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 35947#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 37923#L317 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 37924#L329-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 38461#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 38462#bobCall_returnLabel#1 havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 41118#getCurrentFloorID_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 40767#getCurrentHeading_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 40768#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 40950#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 41597#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 36893#buttonForFloorIsPressed_returnLabel#6 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 36894#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 35996#L2920 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 35997#L254 assume !(0 == isFloorCalling_~floorID#1); 41142#L258 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 36819#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 36262#L1797 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 36263#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 36687#L1948 assume !(0 != timeShift_~tmp___9~2#1); 40858#L2039 assume !(1 == ~doorState~0); 40859#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 39480#L1388 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 39482#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 36879#L1392 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 36352#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 37005#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 37007#L1764 assume !(1 == ~currentHeading~0); 38911#L1774 assume !(0 == ~currentFloorID~0); 40445#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 40446#L1780-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 40713#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 43684#L2945 assume !(-1 == ~expectedDirection~0); 43675#$Ultimate##2627 assume !(1 == ~expectedDirection~0); 43673#L2958 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 43672#timeShift_returnLabel#1 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 43671#getCurrentFloorID_returnLabel#2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 43670#getCurrentHeading_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 43669#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 43667#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 43665#$Ultimate##2732 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 43663#$Ultimate##2748 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 43658#$Ultimate##2764 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 43642#$Ultimate##2780 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 43639#L2920-1 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 43637#L254-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 43629#isFloorCalling_returnLabel#22 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 43625#L1797-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 43618#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 43615#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 43616#L2039-3 assume !(1 == ~doorState~0); 44117#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 44116#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 44074#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 44069#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 44067#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 44068#L1764-3 assume !(1 == ~currentHeading~0); 44141#L1774-9 assume !(0 == ~currentFloorID~0); 36817#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 37607#L1780-7 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 38402#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 43057#L2945-1 assume !(-1 == ~expectedDirection~0); 43052#$Ultimate##5124 assume !(1 == ~expectedDirection~0); 43046#L2958-1 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 43044#timeShift_returnLabel#2 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 43042#getCurrentFloorID_returnLabel#3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 43041#getCurrentHeading_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 43039#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 43030#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 43019#$Ultimate##5229 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 43014#$Ultimate##5245 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 43012#$Ultimate##5261 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 43004#$Ultimate##5277 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 43001#L2920-2 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 42736#L254-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 42728#isFloorCalling_returnLabel#43 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 42724#L1797-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 42723#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 42715#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 42716#L2039-6 assume !(1 == ~doorState~0); 44207#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 44205#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 44203#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 44204#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 44201#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 44200#L1764-6 assume !(1 == ~currentHeading~0); 44140#L1774-18 assume !(0 == ~currentFloorID~0); 37588#L1774-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 37589#L1780-13 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 40029#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 42248#L2945-2 assume !(-1 == ~expectedDirection~0); 42245#$Ultimate##7621 assume !(1 == ~expectedDirection~0); 42243#L2958-2 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 42242#timeShift_returnLabel#3 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 42241#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 42239#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 42234#getOrigin_returnLabel#2 bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 42233#L525-1 assume 0 == initPersonOnFloor_~floor#1; 42229#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 42198#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 42197#L317-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 42192#L329-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 42191#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 42190#bobCall_returnLabel#2 havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 42189#getCurrentFloorID_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 42188#getCurrentHeading_returnLabel#10 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 42186#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 42184#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 42182#$Ultimate##7858 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 42174#$Ultimate##7874 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 42160#$Ultimate##7890 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 42154#$Ultimate##7906 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 42148#L2920-3 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 42139#L254-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 42137#isFloorCalling_returnLabel#64 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 42134#L1797-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 42133#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 42131#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 42130#L2039-9 assume !(1 == ~doorState~0); 42118#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 42098#L1388-6 assume !(1 == stopRequestedInDirection_~dir#1); 42086#L1557-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 42072#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 42068#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 42069#L1764-9 assume !(1 == ~currentHeading~0); 44035#L1774-27 assume !(0 == ~currentFloorID~0); 36812#L1774-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 36813#L1780-19 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 39368#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 44349#L2945-3 assume !(-1 == ~expectedDirection~0); 44347#$Ultimate##10250 assume !(1 == ~expectedDirection~0); 44345#L2958-3 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 44344#timeShift_returnLabel#4 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 44342#L2586-2 [2024-11-08 17:37:06,550 INFO L747 eck$LassoCheckResult]: Loop: 44342#L2586-2 assume !false; 44341#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 44340#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 44339#isBlocked_returnLabel#1 cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 44338#L2594 assume 1 != cleanup_~tmp___0~8#1; 44337#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 44335#L254-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 44326#isFloorCalling_returnLabel#85 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 41870#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 36372#anyStopRequested_returnLabel#1 isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 36373#isIdle_returnLabel#1 cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 38695#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 38600#getCurrentFloorID_returnLabel#5 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 38475#getCurrentHeading_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 38476#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 40961#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 37968#$Ultimate##10438 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 37970#$Ultimate##10454 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 38516#$Ultimate##10470 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 38518#$Ultimate##10486 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 37460#L2920-4 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 37129#L254-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 36377#isFloorCalling_returnLabel#90 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 36378#L1797-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 36944#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 36742#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 36743#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 41614#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 41615#L1388-8 assume !(1 == stopRequestedInDirection_~dir#1); 41983#L1557-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 37214#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 38071#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 38072#L1764-12 assume !(1 == ~currentHeading~0); 41701#L1774-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 40114#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 41495#L1780-25 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 39146#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 45116#L2945-4 assume !(-1 == ~expectedDirection~0); 45112#$Ultimate##12830 assume !(1 == ~expectedDirection~0); 45111#L2958-4 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 44343#timeShift_returnLabel#5 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 44342#L2586-2 [2024-11-08 17:37:06,551 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:37:06,551 INFO L85 PathProgramCache]: Analyzing trace with hash 538101189, now seen corresponding path program 1 times [2024-11-08 17:37:06,551 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:37:06,551 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1886769327] [2024-11-08 17:37:06,552 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:37:06,552 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:37:06,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:37:06,805 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:37:06,805 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:37:06,805 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1886769327] [2024-11-08 17:37:06,806 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1886769327] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:37:06,806 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:37:06,806 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 17:37:06,806 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1850055782] [2024-11-08 17:37:06,807 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:37:06,807 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 17:37:06,807 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:37:06,808 INFO L85 PathProgramCache]: Analyzing trace with hash 1994007419, now seen corresponding path program 1 times [2024-11-08 17:37:06,808 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:37:06,808 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [887352821] [2024-11-08 17:37:06,808 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:37:06,808 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:37:06,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:37:07,048 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:37:07,049 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:37:07,049 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [887352821] [2024-11-08 17:37:07,049 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [887352821] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:37:07,049 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:37:07,050 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2024-11-08 17:37:07,050 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1271858387] [2024-11-08 17:37:07,050 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:37:07,051 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 17:37:07,051 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 17:37:07,051 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2024-11-08 17:37:07,052 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2024-11-08 17:37:07,053 INFO L87 Difference]: Start difference. First operand 9944 states and 18475 transitions. cyclomatic complexity: 8532 Second operand has 9 states, 9 states have (on average 4.555555555555555) internal successors, (41), 9 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:14,117 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 17:37:14,117 INFO L93 Difference]: Finished difference Result 14217 states and 26213 transitions. [2024-11-08 17:37:14,118 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14217 states and 26213 transitions. [2024-11-08 17:37:14,198 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3344 [2024-11-08 17:37:14,260 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14217 states to 14217 states and 26213 transitions. [2024-11-08 17:37:14,261 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14217 [2024-11-08 17:37:14,277 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14217 [2024-11-08 17:37:14,277 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14217 states and 26213 transitions. [2024-11-08 17:37:14,293 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 17:37:14,294 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14217 states and 26213 transitions. [2024-11-08 17:37:14,311 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14217 states and 26213 transitions. [2024-11-08 17:37:14,507 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14217 to 13592. [2024-11-08 17:37:14,533 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13592 states, 13592 states have (on average 1.8484402589758682) internal successors, (25124), 13591 states have internal predecessors, (25124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:14,572 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13592 states to 13592 states and 25124 transitions. [2024-11-08 17:37:14,572 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13592 states and 25124 transitions. [2024-11-08 17:37:14,573 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2024-11-08 17:37:14,575 INFO L425 stractBuchiCegarLoop]: Abstraction has 13592 states and 25124 transitions. [2024-11-08 17:37:14,575 INFO L332 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2024-11-08 17:37:14,575 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13592 states and 25124 transitions. [2024-11-08 17:37:14,633 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3188 [2024-11-08 17:37:14,634 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 17:37:14,634 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 17:37:14,637 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:37:14,638 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:37:14,640 INFO L745 eck$LassoCheckResult]: Stem: 60618#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 60619#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 65691#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 65432#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 61955#valid_product_returnLabel#1 main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 61956#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 61981#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 60238#initFloors_returnLabel#1 assume { :end_inline_initFloors } true; 60239#initTopDown_returnLabel#1 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 62491#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 61353#getOrigin_returnLabel#1 bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 65052#L525 assume 0 == initPersonOnFloor_~floor#1; 66011#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 60131#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 62102#L317 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 62103#L329-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 62642#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 62643#bobCall_returnLabel#1 havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 65318#getCurrentFloorID_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 64964#getCurrentHeading_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 64965#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 65144#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 65812#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 61074#buttonForFloorIsPressed_returnLabel#6 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 61075#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 60179#L2920 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 60180#L254 assume !(0 == isFloorCalling_~floorID#1); 65342#L258 assume !(1 == isFloorCalling_~floorID#1); 65077#L262 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 61000#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 60444#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 60446#L1201-10 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 63950#buttonForFloorIsPressed_returnLabel#11 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 61069#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 61070#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 66236#L1948 assume !(0 != timeShift_~tmp___9~2#1); 65053#L2039 assume !(1 == ~doorState~0); 65054#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 63668#L1388 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 63670#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 61061#L1392 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 60532#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 61185#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 61187#L1764 assume !(1 == ~currentHeading~0); 63090#L1774 assume !(0 == ~currentFloorID~0); 64639#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 64640#L1780-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 64910#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 68239#L2945 assume !(-1 == ~expectedDirection~0); 68235#$Ultimate##2627 assume !(1 == ~expectedDirection~0); 68233#L2958 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 68228#timeShift_returnLabel#1 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 68226#getCurrentFloorID_returnLabel#2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 68225#getCurrentHeading_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 68223#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 68220#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 68216#$Ultimate##2732 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 68203#$Ultimate##2748 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 68199#$Ultimate##2764 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 68193#$Ultimate##2780 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 68190#L2920-1 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 68188#L254-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 68184#isFloorCalling_returnLabel#22 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 68183#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 68181#L1201-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 68177#buttonForFloorIsPressed_returnLabel#22 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 68173#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 68168#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 68164#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 68162#L2039-3 assume !(1 == ~doorState~0); 68155#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 68150#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 68115#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 68110#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 68108#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 68109#L1764-3 assume !(1 == ~currentHeading~0); 68357#L1774-9 assume !(0 == ~currentFloorID~0); 60998#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 61784#L1780-7 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 62583#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 68533#L2945-1 assume !(-1 == ~expectedDirection~0); 68528#$Ultimate##5124 assume !(1 == ~expectedDirection~0); 68529#L2958-1 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 70790#timeShift_returnLabel#2 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 70789#getCurrentFloorID_returnLabel#3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 70788#getCurrentHeading_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 70787#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 68516#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 68515#$Ultimate##5229 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 68502#$Ultimate##5245 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 68495#$Ultimate##5261 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 68489#$Ultimate##5277 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 68486#L2920-2 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 68484#L254-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 68480#isFloorCalling_returnLabel#43 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 68479#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 68477#L1201-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 68473#buttonForFloorIsPressed_returnLabel#33 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 68471#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 68469#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 68465#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 68463#L2039-6 assume !(1 == ~doorState~0); 68449#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 68443#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 68412#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 68407#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 68405#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 66101#L1764-6 assume !(1 == ~currentHeading~0); 66102#L1774-18 assume !(0 == ~currentFloorID~0); 61767#L1774-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 61768#L1780-13 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 64219#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 66006#L2945-2 assume !(-1 == ~expectedDirection~0); 63603#$Ultimate##7621 assume !(1 == ~expectedDirection~0); 60535#L2958-2 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 60984#timeShift_returnLabel#3 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 60324#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 60325#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 61262#getOrigin_returnLabel#2 bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 61263#L525-1 assume 0 == initPersonOnFloor_~floor#1; 64003#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 60249#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 65796#L317-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 60714#L329-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 65757#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 63178#bobCall_returnLabel#2 havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 63179#getCurrentFloorID_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 65256#getCurrentHeading_returnLabel#10 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 61477#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 60271#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 60273#$Ultimate##7858 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 61917#$Ultimate##7874 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 61919#$Ultimate##7890 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 62960#$Ultimate##7906 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 60963#L2920-3 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 68049#L254-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 68047#isFloorCalling_returnLabel#64 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 68043#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 68045#L1201-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 68048#buttonForFloorIsPressed_returnLabel#44 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 68046#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 68041#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 68042#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 68339#L2039-9 assume !(1 == ~doorState~0); 68338#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 68327#L1388-6 assume !(1 == stopRequestedInDirection_~dir#1); 68310#L1557-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 68297#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 68295#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 64606#L1764-9 assume !(1 == ~currentHeading~0); 64607#L1774-27 assume !(0 == ~currentFloorID~0); 60993#L1774-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 60994#L1780-19 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 63555#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 66483#L2945-3 assume !(-1 == ~expectedDirection~0); 66478#$Ultimate##10250 assume !(1 == ~expectedDirection~0); 66473#L2958-3 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 66471#timeShift_returnLabel#4 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 66469#L2586-2 [2024-11-08 17:37:14,642 INFO L747 eck$LassoCheckResult]: Loop: 66469#L2586-2 assume !false; 66468#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 66467#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 66465#isBlocked_returnLabel#1 cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 66464#L2594 assume 1 != cleanup_~tmp___0~8#1; 66462#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 66449#L254-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 66439#isFloorCalling_returnLabel#85 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 66428#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 66423#anyStopRequested_returnLabel#1 isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 66360#isIdle_returnLabel#1 cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 66359#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 66358#getCurrentFloorID_returnLabel#5 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 66357#getCurrentHeading_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 66354#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 66352#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 66349#$Ultimate##10438 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 66334#$Ultimate##10454 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 66326#$Ultimate##10470 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 66319#$Ultimate##10486 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 66316#L2920-4 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 66314#L254-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 66310#isFloorCalling_returnLabel#90 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 66309#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 66307#L1201-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 66303#buttonForFloorIsPressed_returnLabel#55 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 66301#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 66299#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 66295#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 66291#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 66273#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 66263#L1388-8 assume !(1 == stopRequestedInDirection_~dir#1); 66246#L1557-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 66241#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 66239#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 66238#L1764-12 assume !(1 == ~currentHeading~0); 66237#L1774-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 64302#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 65698#L1780-25 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 63327#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 66481#L2945-4 assume !(-1 == ~expectedDirection~0); 66474#$Ultimate##12830 assume !(1 == ~expectedDirection~0); 66472#L2958-4 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 66470#timeShift_returnLabel#5 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 66469#L2586-2 [2024-11-08 17:37:14,642 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:37:14,643 INFO L85 PathProgramCache]: Analyzing trace with hash 240404480, now seen corresponding path program 1 times [2024-11-08 17:37:14,643 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:37:14,643 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [582629414] [2024-11-08 17:37:14,643 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:37:14,643 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:37:14,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:37:14,890 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:37:14,890 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:37:14,891 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [582629414] [2024-11-08 17:37:14,891 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [582629414] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:37:14,891 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:37:14,891 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 17:37:14,892 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [951610721] [2024-11-08 17:37:14,892 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:37:14,892 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 17:37:14,893 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:37:14,893 INFO L85 PathProgramCache]: Analyzing trace with hash 538143698, now seen corresponding path program 1 times [2024-11-08 17:37:14,893 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:37:14,893 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [480569156] [2024-11-08 17:37:14,894 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:37:14,894 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:37:14,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:37:14,988 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:37:14,989 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:37:14,989 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [480569156] [2024-11-08 17:37:14,989 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [480569156] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:37:14,989 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:37:14,989 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-08 17:37:14,990 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [748986394] [2024-11-08 17:37:14,990 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:37:14,990 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 17:37:14,990 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 17:37:14,990 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-08 17:37:14,991 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-08 17:37:14,991 INFO L87 Difference]: Start difference. First operand 13592 states and 25124 transitions. cyclomatic complexity: 11533 Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 7 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:17,007 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 17:37:17,008 INFO L93 Difference]: Finished difference Result 27195 states and 50217 transitions. [2024-11-08 17:37:17,008 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 27195 states and 50217 transitions. [2024-11-08 17:37:17,248 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6403 [2024-11-08 17:37:17,363 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 27195 states to 27195 states and 50217 transitions. [2024-11-08 17:37:17,364 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 27195 [2024-11-08 17:37:17,414 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 27195 [2024-11-08 17:37:17,418 INFO L73 IsDeterministic]: Start isDeterministic. Operand 27195 states and 50217 transitions. [2024-11-08 17:37:17,443 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 17:37:17,444 INFO L218 hiAutomatonCegarLoop]: Abstraction has 27195 states and 50217 transitions. [2024-11-08 17:37:17,477 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27195 states and 50217 transitions. [2024-11-08 17:37:17,800 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27195 to 27151. [2024-11-08 17:37:17,837 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27151 states, 27151 states have (on average 1.8479245699974218) internal successors, (50173), 27150 states have internal predecessors, (50173), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:17,899 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27151 states to 27151 states and 50173 transitions. [2024-11-08 17:37:17,899 INFO L240 hiAutomatonCegarLoop]: Abstraction has 27151 states and 50173 transitions. [2024-11-08 17:37:17,900 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-08 17:37:17,903 INFO L425 stractBuchiCegarLoop]: Abstraction has 27151 states and 50173 transitions. [2024-11-08 17:37:17,903 INFO L332 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2024-11-08 17:37:17,903 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 27151 states and 50173 transitions. [2024-11-08 17:37:17,989 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6394 [2024-11-08 17:37:17,989 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 17:37:17,989 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 17:37:17,992 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:37:17,993 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:37:17,993 INFO L745 eck$LassoCheckResult]: Stem: 101423#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 101424#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 106828#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 106520#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 102775#valid_product_returnLabel#1 main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 102776#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 102801#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 101043#initFloors_returnLabel#1 assume { :end_inline_initFloors } true; 101044#initTopDown_returnLabel#1 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 103342#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 102163#getOrigin_returnLabel#1 bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 106074#L525 assume 0 == initPersonOnFloor_~floor#1; 107231#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 100936#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 102929#L317 assume !(0 == callOnFloor_~floorID#1); 102931#L320 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 103661#L329-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 110389#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 110388#bobCall_returnLabel#1 havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 110387#getCurrentFloorID_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 110386#getCurrentHeading_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 110384#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 110385#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 110397#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 110393#buttonForFloorIsPressed_returnLabel#6 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 110366#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 110359#L2920 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 110358#L254 assume !(0 == isFloorCalling_~floorID#1); 110357#L258 assume !(1 == isFloorCalling_~floorID#1); 110355#L262 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 110353#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 110352#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 110351#L1201-10 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 110346#buttonForFloorIsPressed_returnLabel#11 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 110345#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 110344#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 110343#L1948 assume !(0 != timeShift_~tmp___9~2#1); 110342#L2039 assume !(1 == ~doorState~0); 110341#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 110339#L1388 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 110340#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 110292#L1392 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 110271#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 110269#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 110268#L1764 assume !(1 == ~currentHeading~0); 110265#L1774 assume !(0 == ~currentFloorID~0); 105612#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 105613#L1780-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 110124#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 110122#L2945 assume !(-1 == ~expectedDirection~0); 110118#$Ultimate##2627 assume !(1 == ~expectedDirection~0); 110117#L2958 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 110116#timeShift_returnLabel#1 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 110115#getCurrentFloorID_returnLabel#2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 110114#getCurrentHeading_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 110112#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 110107#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 110103#$Ultimate##2732 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 110087#$Ultimate##2748 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 110079#$Ultimate##2764 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 110072#$Ultimate##2780 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 110069#L2920-1 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 110067#L254-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 108502#isFloorCalling_returnLabel#22 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 108501#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 108499#L1201-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 108495#buttonForFloorIsPressed_returnLabel#22 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 108493#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 108492#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 108489#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 108486#L2039-3 assume !(1 == ~doorState~0); 108484#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 108481#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 108323#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 108320#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 108319#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 108317#L1764-3 assume !(1 == ~currentHeading~0); 107793#L1774-9 assume !(0 == ~currentFloorID~0); 101805#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 102598#L1780-7 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 108301#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 121361#L2945-1 assume !(-1 == ~expectedDirection~0); 121357#$Ultimate##5124 assume !(1 == ~expectedDirection~0); 121356#L2958-1 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 121355#timeShift_returnLabel#2 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 121351#getCurrentFloorID_returnLabel#3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 121349#getCurrentHeading_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 121346#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 121347#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 108223#$Ultimate##5229 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 108209#$Ultimate##5245 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 108200#$Ultimate##5261 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 108192#$Ultimate##5277 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 108189#L2920-2 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 108187#L254-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 108164#isFloorCalling_returnLabel#43 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 108162#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 108158#L1201-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 108154#buttonForFloorIsPressed_returnLabel#33 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 108152#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 108150#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 108118#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 101348#L2039-6 assume !(1 == ~doorState~0); 101349#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 103548#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 106170#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 101068#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 105286#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 107450#L1764-6 assume !(1 == ~currentHeading~0); 115636#L1774-18 assume !(0 == ~currentFloorID~0); 115635#L1774-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 115634#L1780-13 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 115633#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 115631#L2945-2 assume !(-1 == ~expectedDirection~0); 115628#$Ultimate##7621 assume !(1 == ~expectedDirection~0); 115626#L2958-2 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 115625#timeShift_returnLabel#3 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 115624#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 115622#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 115617#getOrigin_returnLabel#2 bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 115615#L525-1 assume 0 == initPersonOnFloor_~floor#1; 115614#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 115582#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 115361#L317-2 assume !(0 == callOnFloor_~floorID#1); 115362#L320-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 125665#L329-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 125663#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 125661#bobCall_returnLabel#2 havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 125658#getCurrentFloorID_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 125656#getCurrentHeading_returnLabel#10 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 125653#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 125648#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 115244#$Ultimate##7858 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 115234#$Ultimate##7874 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 115220#$Ultimate##7890 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 115214#$Ultimate##7906 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 115208#L2920-3 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 115203#L254-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 111769#isFloorCalling_returnLabel#64 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 111768#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 111690#L1201-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 111689#buttonForFloorIsPressed_returnLabel#44 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 111687#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 111686#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 111684#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 111683#L2039-9 assume !(1 == ~doorState~0); 111682#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 111681#L1388-6 assume !(1 == stopRequestedInDirection_~dir#1); 111666#L1557-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 111655#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 111654#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 111653#L1764-9 assume !(1 == ~currentHeading~0); 111622#L1774-27 assume !(0 == ~currentFloorID~0); 101799#L1774-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 101800#L1780-19 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 111611#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 111608#L2945-3 assume !(-1 == ~expectedDirection~0); 111603#$Ultimate##10250 assume !(1 == ~expectedDirection~0); 111600#L2958-3 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 111599#timeShift_returnLabel#4 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 111596#L2586-2 [2024-11-08 17:37:17,994 INFO L747 eck$LassoCheckResult]: Loop: 111596#L2586-2 assume !false; 111594#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 111593#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 111592#isBlocked_returnLabel#1 cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 111589#L2594 assume 1 != cleanup_~tmp___0~8#1; 111588#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 111586#L254-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 111580#isFloorCalling_returnLabel#85 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 111576#L1292 assume !(0 != anyStopRequested_~tmp___3~0#1); 111539#L1296 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 111531#anyStopRequested_returnLabel#1 isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 111527#isIdle_returnLabel#1 cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 111519#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 111520#getCurrentFloorID_returnLabel#5 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 116093#getCurrentHeading_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 116090#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 116091#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 111452#$Ultimate##10438 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 111438#$Ultimate##10454 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 111430#$Ultimate##10470 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 111423#$Ultimate##10486 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 111420#L2920-4 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 111418#L254-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 111415#isFloorCalling_returnLabel#90 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 114248#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 113921#L1201-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 108168#buttonForFloorIsPressed_returnLabel#55 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 108165#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 108167#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 113884#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 113882#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 113878#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 113875#L1388-8 assume !(1 == stopRequestedInDirection_~dir#1); 108090#L1557-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 107792#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 107631#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 107629#L1764-12 assume !(1 == ~currentHeading~0); 107630#L1774-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 106838#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 106839#L1780-25 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 113509#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 111613#L2945-4 assume !(-1 == ~expectedDirection~0); 111605#$Ultimate##12830 assume !(1 == ~expectedDirection~0); 111601#L2958-4 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 111598#timeShift_returnLabel#5 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 111596#L2586-2 [2024-11-08 17:37:17,995 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:37:17,995 INFO L85 PathProgramCache]: Analyzing trace with hash 921514259, now seen corresponding path program 1 times [2024-11-08 17:37:17,995 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:37:17,996 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1951258740] [2024-11-08 17:37:17,996 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:37:17,996 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:37:18,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:37:18,212 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:37:18,212 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:37:18,213 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1951258740] [2024-11-08 17:37:18,213 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1951258740] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:37:18,213 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:37:18,213 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 17:37:18,214 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1223629461] [2024-11-08 17:37:18,214 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:37:18,214 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 17:37:18,214 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:37:18,215 INFO L85 PathProgramCache]: Analyzing trace with hash -1197922407, now seen corresponding path program 1 times [2024-11-08 17:37:18,215 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:37:18,215 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [978829687] [2024-11-08 17:37:18,215 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:37:18,215 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:37:18,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:37:18,273 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:37:18,273 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:37:18,274 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [978829687] [2024-11-08 17:37:18,274 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [978829687] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:37:18,274 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:37:18,274 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-08 17:37:18,275 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1025895891] [2024-11-08 17:37:18,275 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:37:18,275 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 17:37:18,275 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 17:37:18,276 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-08 17:37:18,276 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-08 17:37:18,276 INFO L87 Difference]: Start difference. First operand 27151 states and 50173 transitions. cyclomatic complexity: 23023 Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:19,950 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 17:37:19,951 INFO L93 Difference]: Finished difference Result 53111 states and 98129 transitions. [2024-11-08 17:37:19,951 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53111 states and 98129 transitions. [2024-11-08 17:37:20,118 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12550 [2024-11-08 17:37:20,345 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53111 states to 53111 states and 98129 transitions. [2024-11-08 17:37:20,346 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53111 [2024-11-08 17:37:20,434 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53111 [2024-11-08 17:37:20,434 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53111 states and 98129 transitions. [2024-11-08 17:37:20,475 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 17:37:20,476 INFO L218 hiAutomatonCegarLoop]: Abstraction has 53111 states and 98129 transitions. [2024-11-08 17:37:20,510 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53111 states and 98129 transitions. [2024-11-08 17:37:21,644 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53111 to 53087. [2024-11-08 17:37:21,718 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53087 states, 53087 states have (on average 1.8480042194887638) internal successors, (98105), 53086 states have internal predecessors, (98105), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:21,892 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53087 states to 53087 states and 98105 transitions. [2024-11-08 17:37:21,893 INFO L240 hiAutomatonCegarLoop]: Abstraction has 53087 states and 98105 transitions. [2024-11-08 17:37:21,893 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-08 17:37:21,895 INFO L425 stractBuchiCegarLoop]: Abstraction has 53087 states and 98105 transitions. [2024-11-08 17:37:21,895 INFO L332 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2024-11-08 17:37:21,896 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 53087 states and 98105 transitions. [2024-11-08 17:37:22,289 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12544 [2024-11-08 17:37:22,289 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 17:37:22,289 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 17:37:22,292 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:37:22,293 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:37:22,293 INFO L745 eck$LassoCheckResult]: Stem: 181698#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 181699#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 187042#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 186736#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 183057#valid_product_returnLabel#1 main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 183058#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 183080#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 181319#initFloors_returnLabel#1 assume { :end_inline_initFloors } true; 181320#initTopDown_returnLabel#1 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 183609#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 182442#getOrigin_returnLabel#1 bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 186302#L525 assume 0 == initPersonOnFloor_~floor#1; 187415#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 181212#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 183205#L317 assume !(0 == callOnFloor_~floorID#1); 183207#L320 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 183920#L329-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 193148#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 193147#bobCall_returnLabel#1 havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 193146#getCurrentFloorID_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 193145#getCurrentHeading_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 193143#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 193141#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 193142#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 193226#buttonForFloorIsPressed_returnLabel#6 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 182756#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 181265#L2920 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 181266#L254 assume !(0 == isFloorCalling_~floorID#1); 186632#L258 assume !(1 == isFloorCalling_~floorID#1); 186333#L262 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 182086#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 181527#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 181529#L1201-10 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 185124#buttonForFloorIsPressed_returnLabel#11 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 182159#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 182160#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 187764#L1948 assume !(0 != timeShift_~tmp___9~2#1); 186303#L2039 assume !(1 == ~doorState~0); 186304#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 184829#L1388 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 184831#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 182148#L1392 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 181614#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 187783#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 184235#L1764 assume !(1 == ~currentHeading~0); 184236#L1774 assume !(0 == ~currentFloorID~0); 185856#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 185857#L1780-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 186145#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 200489#L2945 assume !(-1 == ~expectedDirection~0); 200483#$Ultimate##2627 assume !(1 == ~expectedDirection~0); 200478#L2958 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 200476#timeShift_returnLabel#1 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 200475#getCurrentFloorID_returnLabel#2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 200474#getCurrentHeading_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 200471#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 200472#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 200497#$Ultimate##2732 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 204944#$Ultimate##2748 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 204936#$Ultimate##2764 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 204929#$Ultimate##2780 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 204926#L2920-1 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 204920#L254-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 204915#isFloorCalling_returnLabel#22 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 204911#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 204913#L1201-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 204916#buttonForFloorIsPressed_returnLabel#22 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 204914#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 204909#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 204910#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 186973#L2039-3 assume !(1 == ~doorState~0); 186974#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 186077#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 186078#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 182017#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 182944#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 182945#L1764-3 assume !(1 == ~currentHeading~0); 197180#L1774-9 assume !(0 == ~currentFloorID~0); 197174#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 196275#L1780-7 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 196267#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 196264#L2945-1 assume !(-1 == ~expectedDirection~0); 196259#$Ultimate##5124 assume !(1 == ~expectedDirection~0); 196249#L2958-1 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 196250#timeShift_returnLabel#2 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 197038#getCurrentFloorID_returnLabel#3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 197036#getCurrentHeading_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 197033#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 197028#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 191584#$Ultimate##5229 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 191581#$Ultimate##5245 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 191580#$Ultimate##5261 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 191457#$Ultimate##5277 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 191451#L2920-2 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 191447#L254-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 191443#isFloorCalling_returnLabel#43 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 191442#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 191440#L1201-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 191436#buttonForFloorIsPressed_returnLabel#33 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 191430#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 191428#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 191418#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 191416#L2039-6 assume !(1 == ~doorState~0); 191414#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 191399#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 191349#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 191316#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 191314#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 191315#L1764-6 assume !(1 == ~currentHeading~0); 204262#L1774-18 assume !(0 == ~currentFloorID~0); 182864#L1774-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 182865#L1780-13 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 185404#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 213733#L2945-2 assume !(-1 == ~expectedDirection~0); 213730#$Ultimate##7621 assume !(1 == ~expectedDirection~0); 213728#L2958-2 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 213727#timeShift_returnLabel#3 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 213726#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 213724#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 213719#getOrigin_returnLabel#2 bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 213718#L525-1 assume 0 == initPersonOnFloor_~floor#1; 188425#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 188393#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 188394#L317-2 assume !(0 == callOnFloor_~floorID#1); 213654#L320-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 188584#L329-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 188585#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 188580#bobCall_returnLabel#2 havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 188581#getCurrentFloorID_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 188576#getCurrentHeading_returnLabel#10 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 188577#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 188059#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 188054#$Ultimate##7858 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 188053#$Ultimate##7874 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 188038#$Ultimate##7890 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 188032#$Ultimate##7906 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 188026#L2920-3 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 188021#L254-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 188017#isFloorCalling_returnLabel#64 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 188012#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 187952#L1201-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 187953#buttonForFloorIsPressed_returnLabel#44 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 188216#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 188131#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 187944#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 187946#L2039-9 assume !(1 == ~doorState~0); 187937#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 187938#L1388-6 assume !(1 == stopRequestedInDirection_~dir#1); 188010#L1557-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 187906#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 187907#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 210074#L1764-9 assume !(1 == ~currentHeading~0); 210064#L1774-27 assume !(0 == ~currentFloorID~0); 210052#L1774-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 210048#L1780-19 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 210047#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 220274#L2945-3 assume !(-1 == ~expectedDirection~0); 220272#$Ultimate##10250 assume !(1 == ~expectedDirection~0); 220270#L2958-3 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 220269#timeShift_returnLabel#4 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 220267#L2586-2 [2024-11-08 17:37:22,294 INFO L747 eck$LassoCheckResult]: Loop: 220267#L2586-2 assume !false; 220266#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 220265#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 220264#isBlocked_returnLabel#1 cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 220263#L2594 assume 1 != cleanup_~tmp___0~8#1; 220262#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 220261#L254-84 assume !(0 == isFloorCalling_~floorID#1); 210011#L258-84 assume !(1 == isFloorCalling_~floorID#1); 210012#L262-84 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 209996#isFloorCalling_returnLabel#85 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 209997#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 220239#anyStopRequested_returnLabel#1 isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 220238#isIdle_returnLabel#1 cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 220237#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 220236#getCurrentFloorID_returnLabel#5 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 220235#getCurrentHeading_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 220234#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 220233#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 209890#$Ultimate##10438 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 209876#$Ultimate##10454 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 209868#$Ultimate##10470 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 209861#$Ultimate##10486 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 209858#L2920-4 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 209855#L254-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 209856#isFloorCalling_returnLabel#90 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 216009#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 216007#L1201-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 216003#buttonForFloorIsPressed_returnLabel#55 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 216001#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 216000#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 215998#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 215997#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 215996#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 215995#L1388-8 assume !(1 == stopRequestedInDirection_~dir#1); 215950#L1557-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 215941#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 215939#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 215556#L1764-12 assume !(1 == ~currentHeading~0); 215349#L1774-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 215341#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 215332#L1780-25 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 215330#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 220280#L2945-4 assume !(-1 == ~expectedDirection~0); 220276#$Ultimate##12830 assume !(1 == ~expectedDirection~0); 220275#L2958-4 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 220268#timeShift_returnLabel#5 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 220267#L2586-2 [2024-11-08 17:37:22,294 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:37:22,294 INFO L85 PathProgramCache]: Analyzing trace with hash 921514259, now seen corresponding path program 2 times [2024-11-08 17:37:22,295 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:37:22,295 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [236862930] [2024-11-08 17:37:22,295 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:37:22,295 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:37:22,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:37:22,677 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:37:22,677 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:37:22,678 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [236862930] [2024-11-08 17:37:22,680 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [236862930] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:37:22,681 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:37:22,684 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 17:37:22,685 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1603734664] [2024-11-08 17:37:22,685 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:37:22,685 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 17:37:22,686 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:37:22,686 INFO L85 PathProgramCache]: Analyzing trace with hash 1124753005, now seen corresponding path program 1 times [2024-11-08 17:37:22,686 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:37:22,686 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2089780382] [2024-11-08 17:37:22,686 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:37:22,687 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:37:22,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:37:22,735 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:37:22,737 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:37:22,737 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2089780382] [2024-11-08 17:37:22,737 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2089780382] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:37:22,737 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:37:22,738 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-08 17:37:22,738 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1586490094] [2024-11-08 17:37:22,738 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:37:22,738 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 17:37:22,738 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 17:37:22,739 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-08 17:37:22,739 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-08 17:37:22,739 INFO L87 Difference]: Start difference. First operand 53087 states and 98105 transitions. cyclomatic complexity: 45019 Second operand has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:24,401 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 17:37:24,401 INFO L93 Difference]: Finished difference Result 52551 states and 97097 transitions. [2024-11-08 17:37:24,401 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 52551 states and 97097 transitions. [2024-11-08 17:37:24,757 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12248 [2024-11-08 17:37:24,929 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 52551 states to 52551 states and 97097 transitions. [2024-11-08 17:37:24,930 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 52551 [2024-11-08 17:37:24,972 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 52551 [2024-11-08 17:37:24,972 INFO L73 IsDeterministic]: Start isDeterministic. Operand 52551 states and 97097 transitions. [2024-11-08 17:37:25,025 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 17:37:25,025 INFO L218 hiAutomatonCegarLoop]: Abstraction has 52551 states and 97097 transitions. [2024-11-08 17:37:25,241 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52551 states and 97097 transitions. [2024-11-08 17:37:25,773 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52551 to 52551. [2024-11-08 17:37:25,829 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52551 states, 52551 states have (on average 1.847671785503606) internal successors, (97097), 52550 states have internal predecessors, (97097), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:26,254 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52551 states to 52551 states and 97097 transitions. [2024-11-08 17:37:26,255 INFO L240 hiAutomatonCegarLoop]: Abstraction has 52551 states and 97097 transitions. [2024-11-08 17:37:26,258 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-08 17:37:26,259 INFO L425 stractBuchiCegarLoop]: Abstraction has 52551 states and 97097 transitions. [2024-11-08 17:37:26,259 INFO L332 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2024-11-08 17:37:26,260 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 52551 states and 97097 transitions. [2024-11-08 17:37:26,446 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12248 [2024-11-08 17:37:26,446 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 17:37:26,447 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 17:37:26,450 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:37:26,450 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:37:26,451 INFO L745 eck$LassoCheckResult]: Stem: 287335#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 287336#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 292628#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 292328#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 288661#valid_product_returnLabel#1 main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 288662#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 288687#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 286961#initFloors_returnLabel#1 assume { :end_inline_initFloors } true; 286962#initTopDown_returnLabel#1 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 289192#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 288065#getOrigin_returnLabel#1 bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 291893#L525 assume 0 == initPersonOnFloor_~floor#1; 293000#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 286858#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 288804#L317 assume !(0 == callOnFloor_~floorID#1); 288806#L320 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 289496#L329-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 300946#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 300945#bobCall_returnLabel#1 havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 300944#getCurrentFloorID_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 300943#getCurrentHeading_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 300941#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 300942#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 300953#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 300961#buttonForFloorIsPressed_returnLabel#6 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 300923#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 300911#L2920 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 300910#L254 assume !(0 == isFloorCalling_~floorID#1); 300909#L258 assume !(1 == isFloorCalling_~floorID#1); 300907#L262 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 300905#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 300904#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 300903#L1201-10 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 300898#buttonForFloorIsPressed_returnLabel#11 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 300897#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 300896#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 300895#L1948 assume !(0 != timeShift_~tmp___9~2#1); 300894#L2039 assume !(1 == ~doorState~0); 300893#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 300892#L1388 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 292914#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 292915#L1392 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 299509#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 299508#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 299506#L1764 assume !(1 == ~currentHeading~0); 299500#L1774 assume !(0 == ~currentFloorID~0); 299498#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 299497#L1780-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 299494#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 299492#L2945 assume !(-1 == ~expectedDirection~0); 299482#$Ultimate##2627 assume !(1 == ~expectedDirection~0); 299480#L2958 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 299479#timeShift_returnLabel#1 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 299478#getCurrentFloorID_returnLabel#2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 299477#getCurrentHeading_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 299476#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 299472#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 299468#$Ultimate##2732 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 299465#$Ultimate##2748 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 299459#$Ultimate##2764 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 299437#$Ultimate##2780 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 299434#L2920-1 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 299432#L254-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 299428#isFloorCalling_returnLabel#22 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 299427#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 299425#L1201-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 299417#buttonForFloorIsPressed_returnLabel#22 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 299414#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 299413#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 299411#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 299410#L2039-3 assume !(1 == ~doorState~0); 299409#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 299407#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 298046#L1557-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 298001#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 297998#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 297995#L1764-3 assume !(1 == ~currentHeading~0); 297990#L1774-9 assume !(0 == ~currentFloorID~0); 297989#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 297805#L1780-7 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 297801#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 297796#L2945-1 assume !(-1 == ~expectedDirection~0); 297792#$Ultimate##5124 assume !(1 == ~expectedDirection~0); 297788#L2958-1 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 297786#timeShift_returnLabel#2 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 297784#getCurrentFloorID_returnLabel#3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 297782#getCurrentHeading_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 297779#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 297774#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 294877#$Ultimate##5229 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 294873#$Ultimate##5245 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 294870#$Ultimate##5261 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 294846#$Ultimate##5277 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 294843#L2920-2 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 294841#L254-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 294837#isFloorCalling_returnLabel#43 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 294836#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 294834#L1201-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 294830#buttonForFloorIsPressed_returnLabel#33 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 294828#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 294827#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 294825#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 294824#L2039-6 assume !(1 == ~doorState~0); 294245#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 294237#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 294074#L1557-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 294068#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 294050#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 294039#L1764-6 assume !(1 == ~currentHeading~0); 294027#L1774-18 assume !(0 == ~currentFloorID~0); 294019#L1774-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 294010#L1780-13 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 294008#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 311937#L2945-2 assume !(-1 == ~expectedDirection~0); 311934#$Ultimate##7621 assume !(1 == ~expectedDirection~0); 311932#L2958-2 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 311931#timeShift_returnLabel#3 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 311930#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 311928#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 311923#getOrigin_returnLabel#2 bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 311922#L525-1 assume 0 == initPersonOnFloor_~floor#1; 311899#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 311870#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 293885#L317-2 assume !(0 == callOnFloor_~floorID#1); 293880#L320-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 293879#L329-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 293870#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 293871#bobCall_returnLabel#2 havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 293862#getCurrentFloorID_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 293863#getCurrentHeading_returnLabel#10 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 293805#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 293806#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 293795#$Ultimate##7858 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 293782#$Ultimate##7874 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 293767#$Ultimate##7890 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 293760#$Ultimate##7906 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 293754#L2920-3 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 293748#L254-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 293749#isFloorCalling_returnLabel#64 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 319550#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 319545#L1201-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 319544#buttonForFloorIsPressed_returnLabel#44 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 319542#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 319541#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 319539#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 319538#L2039-9 assume !(1 == ~doorState~0); 319537#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 319536#L1388-6 assume !(1 == stopRequestedInDirection_~dir#1); 319535#L1557-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 287711#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 320071#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 311753#L1764-9 assume !(1 == ~currentHeading~0); 311719#L1774-27 assume !(0 == ~currentFloorID~0); 287708#L1774-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 287709#L1780-19 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 332086#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 332080#L2945-3 assume !(-1 == ~expectedDirection~0); 331985#$Ultimate##10250 assume !(1 == ~expectedDirection~0); 331977#L2958-3 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 331975#timeShift_returnLabel#4 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 331973#L2586-2 [2024-11-08 17:37:26,453 INFO L747 eck$LassoCheckResult]: Loop: 331973#L2586-2 assume !false; 331971#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 331970#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 331969#isBlocked_returnLabel#1 cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 331962#L2594 assume 1 != cleanup_~tmp___0~8#1; 331960#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 331958#L254-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 331957#isFloorCalling_returnLabel#85 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 311741#L1292 assume !(0 != anyStopRequested_~tmp___3~0#1); 311743#L1296 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 325047#L254-85 assume !(0 == isFloorCalling_~floorID#1); 329491#L258-85 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 329488#isFloorCalling_returnLabel#86 anyStopRequested_#t~ret12#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret12#1;havoc anyStopRequested_#t~ret12#1; 329444#L1303 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 329425#anyStopRequested_returnLabel#1 isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 329423#isIdle_returnLabel#1 cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 329421#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 329419#getCurrentFloorID_returnLabel#5 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 329417#getCurrentHeading_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 329414#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 329415#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 318578#$Ultimate##10438 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 318575#$Ultimate##10454 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 318573#$Ultimate##10470 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 318093#$Ultimate##10486 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 318089#L2920-4 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 318086#L254-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 318082#isFloorCalling_returnLabel#90 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 318081#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 316526#L1201-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 316518#buttonForFloorIsPressed_returnLabel#55 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 316516#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 316512#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 316510#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 316509#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 316508#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 316506#L1388-8 assume !(1 == stopRequestedInDirection_~dir#1); 316507#L1557-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 316166#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 316637#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 316638#L1764-12 assume !(1 == ~currentHeading~0); 332012#L1774-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 332011#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 332010#L1780-25 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 332009#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 332003#L2945-4 assume !(-1 == ~expectedDirection~0); 331992#$Ultimate##12830 assume !(1 == ~expectedDirection~0); 331991#L2958-4 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 331974#timeShift_returnLabel#5 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 331973#L2586-2 [2024-11-08 17:37:26,454 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:37:26,454 INFO L85 PathProgramCache]: Analyzing trace with hash 921514259, now seen corresponding path program 3 times [2024-11-08 17:37:26,454 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:37:26,455 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [16928477] [2024-11-08 17:37:26,455 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:37:26,455 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:37:26,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:37:26,875 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:37:26,876 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:37:26,876 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [16928477] [2024-11-08 17:37:26,876 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [16928477] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:37:26,876 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:37:26,876 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 17:37:26,876 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1053945516] [2024-11-08 17:37:26,877 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:37:26,877 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 17:37:26,877 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:37:26,877 INFO L85 PathProgramCache]: Analyzing trace with hash -1478477423, now seen corresponding path program 1 times [2024-11-08 17:37:26,878 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:37:26,878 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1016034702] [2024-11-08 17:37:26,878 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:37:26,878 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:37:26,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:37:26,929 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:37:26,929 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:37:26,929 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1016034702] [2024-11-08 17:37:26,930 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1016034702] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:37:26,930 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:37:26,930 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 17:37:26,930 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [591205223] [2024-11-08 17:37:26,930 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:37:26,931 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 17:37:26,931 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 17:37:26,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-08 17:37:26,932 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-08 17:37:26,932 INFO L87 Difference]: Start difference. First operand 52551 states and 97097 transitions. cyclomatic complexity: 44547 Second operand has 4 states, 4 states have (on average 12.25) internal successors, (49), 4 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:27,835 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 17:37:27,835 INFO L93 Difference]: Finished difference Result 52655 states and 97201 transitions. [2024-11-08 17:37:27,836 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 52655 states and 97201 transitions. [2024-11-08 17:37:28,030 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12272 [2024-11-08 17:37:28,349 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 52655 states to 52655 states and 97201 transitions. [2024-11-08 17:37:28,349 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 52655 [2024-11-08 17:37:28,386 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 52655 [2024-11-08 17:37:28,386 INFO L73 IsDeterministic]: Start isDeterministic. Operand 52655 states and 97201 transitions. [2024-11-08 17:37:28,424 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 17:37:28,425 INFO L218 hiAutomatonCegarLoop]: Abstraction has 52655 states and 97201 transitions. [2024-11-08 17:37:28,454 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52655 states and 97201 transitions. [2024-11-08 17:37:29,044 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52655 to 52619. [2024-11-08 17:37:29,093 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52619 states, 52619 states have (on average 1.8465763317432866) internal successors, (97165), 52618 states have internal predecessors, (97165), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:29,226 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52619 states to 52619 states and 97165 transitions. [2024-11-08 17:37:29,226 INFO L240 hiAutomatonCegarLoop]: Abstraction has 52619 states and 97165 transitions. [2024-11-08 17:37:29,227 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-08 17:37:29,228 INFO L425 stractBuchiCegarLoop]: Abstraction has 52619 states and 97165 transitions. [2024-11-08 17:37:29,228 INFO L332 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2024-11-08 17:37:29,228 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 52619 states and 97165 transitions. [2024-11-08 17:37:29,413 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12264 [2024-11-08 17:37:29,414 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 17:37:29,414 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 17:37:29,418 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:37:29,418 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:37:29,419 INFO L745 eck$LassoCheckResult]: Stem: 392550#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 392551#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 397736#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 397464#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 393884#valid_product_returnLabel#1 main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 393885#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 393910#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 392176#initFloors_returnLabel#1 assume { :end_inline_initFloors } true; 392177#initTopDown_returnLabel#1 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 394412#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 393280#getOrigin_returnLabel#1 bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 397058#L525 assume 0 == initPersonOnFloor_~floor#1; 398075#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 392073#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 394028#L317 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 394029#L329-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 425956#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 425955#bobCall_returnLabel#1 havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 425954#getCurrentFloorID_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 425953#getCurrentHeading_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 425951#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 425952#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 425963#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 425971#buttonForFloorIsPressed_returnLabel#6 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 425933#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 425921#L2920 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 425920#L254 assume !(0 == isFloorCalling_~floorID#1); 425919#L258 assume !(1 == isFloorCalling_~floorID#1); 425917#L262 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 425915#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 425914#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 425913#L1201-10 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 425908#buttonForFloorIsPressed_returnLabel#11 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 425906#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 425905#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 425903#L1948 assume !(0 != timeShift_~tmp___9~2#1); 425902#L2039 assume !(1 == ~doorState~0); 425901#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 425899#L1388 assume !(1 == stopRequestedInDirection_~dir#1); 425900#L1557 assume !(0 == ~currentFloorID~0); 426012#L1563 assume !(~currentFloorID~0 > 0); 426009#$Ultimate##2255 assume ~currentFloorID~0 > 0; 426008#L1580 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 425881#L1581 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 425879#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 425877#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 425876#L1764 assume !(1 == ~currentHeading~0); 425873#L1774 assume !(0 == ~currentFloorID~0); 425872#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 425871#L1780-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 425868#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 425865#L2945 assume !(-1 == ~expectedDirection~0); 425855#$Ultimate##2627 assume !(1 == ~expectedDirection~0); 425854#L2958 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 425853#timeShift_returnLabel#1 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 425851#getCurrentFloorID_returnLabel#2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 425849#getCurrentHeading_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 425847#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 425848#L2876-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 425867#L1201-16 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 427297#buttonForFloorIsPressed_returnLabel#17 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 427269#L2880-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 427268#L2920-1 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 427262#L254-21 assume !(0 == isFloorCalling_~floorID#1); 427260#L258-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 427256#isFloorCalling_returnLabel#22 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 427253#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 427254#L1201-21 assume !(0 == buttonForFloorIsPressed_~floorID#1); 427317#L1205-21 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 427307#buttonForFloorIsPressed_returnLabel#22 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 427305#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 427302#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 427243#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 424760#L2039-3 assume !(1 == ~doorState~0); 424747#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 424744#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 424745#L1557-2 assume !(0 == ~currentFloorID~0); 424808#L1563-2 assume !(~currentFloorID~0 > 0); 424441#$Ultimate##4752 assume ~currentFloorID~0 > 0; 424807#L1580-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 392958#L1581-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 392959#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 424396#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 424392#L1764-3 assume !(1 == ~currentHeading~0); 424364#L1774-9 assume !(0 == ~currentFloorID~0); 424361#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 424360#L1780-7 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 424353#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 424350#L2945-1 assume !(-1 == ~expectedDirection~0); 424334#$Ultimate##5124 assume !(1 == ~expectedDirection~0); 424333#L2958-1 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 424332#timeShift_returnLabel#2 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 424328#getCurrentFloorID_returnLabel#3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 424326#getCurrentHeading_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 424323#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 424324#L2876-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 428325#L1201-27 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 428317#buttonForFloorIsPressed_returnLabel#28 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 424290#L2880-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 424289#L2920-2 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 424288#L254-42 assume !(0 == isFloorCalling_~floorID#1); 424287#L258-42 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 424283#isFloorCalling_returnLabel#43 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 424280#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 424281#L1201-32 assume !(0 == buttonForFloorIsPressed_~floorID#1); 428343#L1205-32 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 428333#buttonForFloorIsPressed_returnLabel#33 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 428331#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 428329#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 424271#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 410654#L2039-6 assume !(1 == ~doorState~0); 410651#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 410649#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 407474#L1557-4 assume !(0 == ~currentFloorID~0); 407463#L1563-4 assume !(~currentFloorID~0 > 0); 407464#$Ultimate##7249 assume ~currentFloorID~0 > 0; 411688#L1580-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 392418#L1581-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 392419#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 410540#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 410539#L1764-6 assume !(1 == ~currentHeading~0); 410519#L1774-18 assume !(0 == ~currentFloorID~0); 410517#L1774-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 410516#L1780-13 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 410513#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 410511#L2945-2 assume !(-1 == ~expectedDirection~0); 410508#$Ultimate##7621 assume !(1 == ~expectedDirection~0); 410506#L2958-2 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 410505#timeShift_returnLabel#3 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 410504#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 410502#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 410497#getOrigin_returnLabel#2 bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 410496#L525-1 assume 0 == initPersonOnFloor_~floor#1; 410403#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 410370#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 408915#L317-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 408904#L329-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 408902#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 408900#bobCall_returnLabel#2 havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 408898#getCurrentFloorID_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 408896#getCurrentHeading_returnLabel#10 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 408893#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 408894#L2876-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 409951#L1201-38 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 409946#buttonForFloorIsPressed_returnLabel#39 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 408786#L2880-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 407988#L2920-3 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 408781#L254-63 assume !(0 == isFloorCalling_~floorID#1); 407958#L258-63 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 407954#isFloorCalling_returnLabel#64 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 407953#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 407948#L1201-43 assume !(0 == buttonForFloorIsPressed_~floorID#1); 405847#L1205-43 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 405838#buttonForFloorIsPressed_returnLabel#44 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 405833#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 405831#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 398485#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 398484#L2039-9 assume !(1 == ~doorState~0); 398483#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 398416#L1388-6 assume !(1 == stopRequestedInDirection_~dir#1); 398414#L1557-6 assume !(0 == ~currentFloorID~0); 397902#L1563-6 assume !(~currentFloorID~0 > 0); 395163#$Ultimate##9878 assume ~currentFloorID~0 > 0; 393508#L1580-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 393510#L1581-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 392087#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 396168#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 396597#L1764-9 assume !(1 == ~currentHeading~0); 396598#L1774-27 assume !(0 == ~currentFloorID~0); 392925#L1774-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 392926#L1780-19 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 395499#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 407195#L2945-3 assume !(-1 == ~expectedDirection~0); 407193#$Ultimate##10250 assume !(1 == ~expectedDirection~0); 407191#L2958-3 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 407190#timeShift_returnLabel#4 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 407188#L2586-2 [2024-11-08 17:37:29,421 INFO L747 eck$LassoCheckResult]: Loop: 407188#L2586-2 assume !false; 407187#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 407186#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 407185#isBlocked_returnLabel#1 cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 407184#L2594 assume 1 != cleanup_~tmp___0~8#1; 407183#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 407182#L254-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 407181#isFloorCalling_returnLabel#85 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 407180#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 407178#anyStopRequested_returnLabel#1 isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 407177#isIdle_returnLabel#1 cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 407176#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 407175#getCurrentFloorID_returnLabel#5 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 407174#getCurrentHeading_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 407172#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 407173#L2876-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 407151#L1201-49 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 407143#buttonForFloorIsPressed_returnLabel#50 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 407135#L2880-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 407134#L2920-4 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 407133#L254-89 assume !(0 == isFloorCalling_~floorID#1); 407130#L258-89 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 407132#isFloorCalling_returnLabel#90 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 419577#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 419575#L1201-54 assume !(0 == buttonForFloorIsPressed_~floorID#1); 419574#L1205-54 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 419570#buttonForFloorIsPressed_returnLabel#55 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 419562#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 419560#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 419556#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 398481#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 398476#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 398477#L1388-8 assume !(1 == stopRequestedInDirection_~dir#1); 398469#L1557-8 assume !(0 == ~currentFloorID~0); 398470#L1563-8 assume !(~currentFloorID~0 > 0); 398871#$Ultimate##12458 assume ~currentFloorID~0 > 0; 398969#L1580-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 398888#L1581-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 398841#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 398832#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 398822#L1764-12 assume !(1 == ~currentHeading~0); 398811#L1774-36 assume !(0 == ~currentFloorID~0); 398801#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 398794#L1780-25 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 398792#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 407203#L2945-4 assume !(-1 == ~expectedDirection~0); 407199#$Ultimate##12830 assume !(1 == ~expectedDirection~0); 407198#L2958-4 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 407189#timeShift_returnLabel#5 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 407188#L2586-2 [2024-11-08 17:37:29,422 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:37:29,422 INFO L85 PathProgramCache]: Analyzing trace with hash -1627831511, now seen corresponding path program 1 times [2024-11-08 17:37:29,423 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:37:29,423 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1258117048] [2024-11-08 17:37:29,423 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:37:29,423 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:37:29,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:37:29,936 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:37:29,937 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:37:29,939 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1258117048] [2024-11-08 17:37:29,939 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1258117048] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:37:29,939 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:37:29,940 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 17:37:29,940 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [88218366] [2024-11-08 17:37:29,940 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:37:29,940 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 17:37:29,941 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:37:29,941 INFO L85 PathProgramCache]: Analyzing trace with hash 1678568443, now seen corresponding path program 1 times [2024-11-08 17:37:29,941 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:37:29,941 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1119797669] [2024-11-08 17:37:29,941 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:37:29,946 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:37:29,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:37:30,003 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:37:30,003 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:37:30,003 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1119797669] [2024-11-08 17:37:30,003 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1119797669] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:37:30,004 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:37:30,004 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-08 17:37:30,004 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1411813095] [2024-11-08 17:37:30,004 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:37:30,007 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 17:37:30,010 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 17:37:30,011 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-08 17:37:30,011 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-08 17:37:30,011 INFO L87 Difference]: Start difference. First operand 52619 states and 97165 transitions. cyclomatic complexity: 44547 Second operand has 3 states, 3 states have (on average 16.333333333333332) internal successors, (49), 3 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:31,569 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 17:37:31,569 INFO L93 Difference]: Finished difference Result 98327 states and 181005 transitions. [2024-11-08 17:37:31,569 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 98327 states and 181005 transitions. [2024-11-08 17:37:32,240 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23640 [2024-11-08 17:37:32,516 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 98327 states to 98327 states and 181005 transitions. [2024-11-08 17:37:32,516 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 98327 [2024-11-08 17:37:32,598 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 98327 [2024-11-08 17:37:32,599 INFO L73 IsDeterministic]: Start isDeterministic. Operand 98327 states and 181005 transitions. [2024-11-08 17:37:32,978 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 17:37:32,979 INFO L218 hiAutomatonCegarLoop]: Abstraction has 98327 states and 181005 transitions. [2024-11-08 17:37:33,025 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98327 states and 181005 transitions. [2024-11-08 17:37:33,990 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98327 to 98327. [2024-11-08 17:37:34,067 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 98327 states, 98327 states have (on average 1.840847376610697) internal successors, (181005), 98326 states have internal predecessors, (181005), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:34,312 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98327 states to 98327 states and 181005 transitions. [2024-11-08 17:37:34,312 INFO L240 hiAutomatonCegarLoop]: Abstraction has 98327 states and 181005 transitions. [2024-11-08 17:37:34,312 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-08 17:37:34,313 INFO L425 stractBuchiCegarLoop]: Abstraction has 98327 states and 181005 transitions. [2024-11-08 17:37:34,313 INFO L332 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2024-11-08 17:37:34,313 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 98327 states and 181005 transitions. [2024-11-08 17:37:34,650 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23640 [2024-11-08 17:37:34,650 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 17:37:34,650 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 17:37:34,654 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:37:34,654 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:37:34,655 INFO L745 eck$LassoCheckResult]: Stem: 543501#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 543502#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 548938#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 548612#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 544842#valid_product_returnLabel#1 main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 544843#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 544868#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 543129#initFloors_returnLabel#1 assume { :end_inline_initFloors } true; 543130#initTopDown_returnLabel#1 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 545386#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 544237#getOrigin_returnLabel#1 bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 548150#L525 assume 0 == initPersonOnFloor_~floor#1; 549363#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 543027#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 544989#L317 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 544990#L329-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 550909#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 550908#bobCall_returnLabel#1 havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 550907#getCurrentFloorID_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 550906#getCurrentHeading_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 550904#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 550903#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 550901#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 550897#buttonForFloorIsPressed_returnLabel#6 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 544547#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 543940#L2920 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 548967#L254 assume !(0 == isFloorCalling_~floorID#1); 548968#L258 assume !(1 == isFloorCalling_~floorID#1); 548184#L262 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 543884#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 543330#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 543332#L1201-10 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 550788#buttonForFloorIsPressed_returnLabel#11 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 550787#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 550786#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 550784#L1948 assume !(0 != timeShift_~tmp___9~2#1); 550783#L2039 assume !(1 == ~doorState~0); 550782#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 550780#L1388 assume !(1 == stopRequestedInDirection_~dir#1); 550779#L1557 assume !(0 == ~currentFloorID~0); 550778#L1563 assume ~currentFloorID~0 > 0; 550777#L1564 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 550776#L254-6 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 550775#isFloorCalling_returnLabel#7 stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 547850#L1568 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 543419#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 550075#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 551011#L1764 assume !(1 == ~currentHeading~0); 551005#L1774 assume !(0 == ~currentFloorID~0); 551000#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 550994#L1780-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 550991#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 550989#L2945 assume !(-1 == ~expectedDirection~0); 550985#$Ultimate##2627 assume !(1 == ~expectedDirection~0); 550984#L2958 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 550983#timeShift_returnLabel#1 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 550982#getCurrentFloorID_returnLabel#2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 550981#getCurrentHeading_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 550979#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 550977#L2876-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 550957#L1201-16 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 550954#buttonForFloorIsPressed_returnLabel#17 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 550933#L2880-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 550934#L2920-1 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 550541#L254-21 assume !(0 == isFloorCalling_~floorID#1); 550542#L258-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 557580#isFloorCalling_returnLabel#22 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 556249#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 556251#L1201-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 556237#buttonForFloorIsPressed_returnLabel#22 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 556238#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 556223#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 556224#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 550033#L2039-3 assume !(1 == ~doorState~0); 550034#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 550029#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 550028#L1557-2 assume !(0 == ~currentFloorID~0); 550027#L1563-2 assume ~currentFloorID~0 > 0; 550024#L1564-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 550025#L254-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 550026#isFloorCalling_returnLabel#28 stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 550022#L1568-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 550023#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 557784#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 549413#L1764-3 assume !(1 == ~currentHeading~0); 549415#L1774-9 assume !(0 == ~currentFloorID~0); 571595#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 571593#L1780-7 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 571591#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 571586#L2945-1 assume !(-1 == ~expectedDirection~0); 571579#$Ultimate##5124 assume !(1 == ~expectedDirection~0); 571577#L2958-1 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 571574#timeShift_returnLabel#2 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 571572#getCurrentFloorID_returnLabel#3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 571571#getCurrentHeading_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 571569#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 571570#L2876-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 567411#L1201-27 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 640229#buttonForFloorIsPressed_returnLabel#28 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 579329#L2880-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 571612#L2920-2 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 640720#L254-42 assume !(0 == isFloorCalling_~floorID#1); 578088#L258-42 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 578085#isFloorCalling_returnLabel#43 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 578081#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 578077#L1201-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 578074#buttonForFloorIsPressed_returnLabel#33 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 578066#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 578065#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 578063#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 567344#L2039-6 assume !(1 == ~doorState~0); 578062#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 578060#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 565502#L1557-4 assume !(0 == ~currentFloorID~0); 565500#L1563-4 assume ~currentFloorID~0 > 0; 565498#L1564-4 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 565499#L254-48 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 640902#isFloorCalling_returnLabel#49 stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 548085#L1568-4 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 548086#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 590749#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 590748#L1764-6 assume !(1 == ~currentHeading~0); 590744#L1774-18 assume !(0 == ~currentFloorID~0); 590743#L1774-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 590482#L1780-13 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 590738#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 590732#L2945-2 assume !(-1 == ~expectedDirection~0); 590728#$Ultimate##7621 assume !(1 == ~expectedDirection~0); 590560#L2958-2 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 590542#timeShift_returnLabel#3 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 590541#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 590535#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 590529#getOrigin_returnLabel#2 bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 590525#L525-1 assume 0 == initPersonOnFloor_~floor#1; 590526#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 590490#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 590491#L317-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 564852#L329-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 611097#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 611096#bobCall_returnLabel#2 havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 611095#getCurrentFloorID_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 611094#getCurrentHeading_returnLabel#10 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 611093#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 611041#L2876-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 590462#L1201-38 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 640107#buttonForFloorIsPressed_returnLabel#39 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 579543#L2880-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 579537#L2920-3 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 579535#L254-63 assume !(0 == isFloorCalling_~floorID#1); 579529#L258-63 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 579530#isFloorCalling_returnLabel#64 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 594141#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 594135#L1201-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 594134#buttonForFloorIsPressed_returnLabel#44 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 594132#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 594126#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 594124#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 563581#L2039-9 assume !(1 == ~doorState~0); 563580#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 563579#L1388-6 assume !(1 == stopRequestedInDirection_~dir#1); 562515#L1557-6 assume !(0 == ~currentFloorID~0); 562514#L1563-6 assume ~currentFloorID~0 > 0; 562513#L1564-6 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 562512#L254-69 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 562511#isFloorCalling_returnLabel#70 stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 557924#L1568-6 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 557925#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 610094#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 610092#L1764-9 assume !(1 == ~currentHeading~0); 610091#L1774-27 assume !(0 == ~currentFloorID~0); 610089#L1774-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 543877#L1780-19 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 602199#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 602193#L2945-3 assume !(-1 == ~expectedDirection~0); 602190#$Ultimate##10250 assume !(1 == ~expectedDirection~0); 602187#L2958-3 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 602185#timeShift_returnLabel#4 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 602183#L2586-2 [2024-11-08 17:37:34,657 INFO L747 eck$LassoCheckResult]: Loop: 602183#L2586-2 assume !false; 602181#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 602179#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 602177#isBlocked_returnLabel#1 cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 602175#L2594 assume 1 != cleanup_~tmp___0~8#1; 602173#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 602171#L254-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 602168#isFloorCalling_returnLabel#85 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 602166#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 561039#anyStopRequested_returnLabel#1 isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 602164#isIdle_returnLabel#1 cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 602159#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 602157#getCurrentFloorID_returnLabel#5 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 602155#getCurrentHeading_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 602153#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 602151#L2876-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 602152#L1201-49 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 611462#buttonForFloorIsPressed_returnLabel#50 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 611415#L2880-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 548421#L2920-4 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 544201#L254-89 assume !(0 == isFloorCalling_~floorID#1); 544202#L258-89 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 579522#isFloorCalling_returnLabel#90 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 604678#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 604676#L1201-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 604672#buttonForFloorIsPressed_returnLabel#55 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 604670#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 604663#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 604659#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 604129#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 610307#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 610305#L1388-8 assume !(1 == stopRequestedInDirection_~dir#1); 561271#L1557-8 assume !(0 == ~currentFloorID~0); 561270#L1563-8 assume ~currentFloorID~0 > 0; 561269#L1564-8 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 561268#L254-95 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 561267#isFloorCalling_returnLabel#96 stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 549998#L1568-8 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 549999#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 595706#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 549215#L1764-12 assume !(1 == ~currentHeading~0); 549216#L1774-36 assume !(0 == ~currentFloorID~0); 547299#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 548944#L1780-25 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 610231#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 610229#L2945-4 assume !(-1 == ~expectedDirection~0); 610225#$Ultimate##12830 assume !(1 == ~expectedDirection~0); 610224#L2958-4 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 602184#timeShift_returnLabel#5 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 602183#L2586-2 [2024-11-08 17:37:34,658 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:37:34,658 INFO L85 PathProgramCache]: Analyzing trace with hash 85645443, now seen corresponding path program 1 times [2024-11-08 17:37:34,659 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:37:34,659 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1619086398] [2024-11-08 17:37:34,659 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:37:34,659 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:37:34,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:37:35,423 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:37:35,424 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:37:35,424 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1619086398] [2024-11-08 17:37:35,424 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1619086398] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:37:35,424 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:37:35,424 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 17:37:35,424 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [847476018] [2024-11-08 17:37:35,424 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:37:35,425 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 17:37:35,425 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:37:35,425 INFO L85 PathProgramCache]: Analyzing trace with hash -1435001285, now seen corresponding path program 1 times [2024-11-08 17:37:35,425 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:37:35,425 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1206069154] [2024-11-08 17:37:35,425 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:37:35,426 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:37:35,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:37:35,539 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:37:35,539 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:37:35,540 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1206069154] [2024-11-08 17:37:35,540 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1206069154] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:37:35,540 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:37:35,540 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-08 17:37:35,540 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1312895296] [2024-11-08 17:37:35,540 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:37:35,540 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 17:37:35,541 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 17:37:35,541 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-08 17:37:35,541 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-08 17:37:35,541 INFO L87 Difference]: Start difference. First operand 98327 states and 181005 transitions. cyclomatic complexity: 82679 Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 5 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:40,692 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 17:37:40,692 INFO L93 Difference]: Finished difference Result 129667 states and 238859 transitions. [2024-11-08 17:37:40,692 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 129667 states and 238859 transitions. [2024-11-08 17:37:41,102 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 31742 [2024-11-08 17:37:41,912 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 129667 states to 129667 states and 238859 transitions. [2024-11-08 17:37:41,912 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 129667 [2024-11-08 17:37:41,996 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 129667 [2024-11-08 17:37:41,997 INFO L73 IsDeterministic]: Start isDeterministic. Operand 129667 states and 238859 transitions. [2024-11-08 17:37:42,054 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 17:37:42,054 INFO L218 hiAutomatonCegarLoop]: Abstraction has 129667 states and 238859 transitions. [2024-11-08 17:37:42,112 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 129667 states and 238859 transitions. [2024-11-08 17:37:43,402 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 129667 to 96711. [2024-11-08 17:37:43,477 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96711 states, 96711 states have (on average 1.8437096090413707) internal successors, (178307), 96710 states have internal predecessors, (178307), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:43,770 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96711 states to 96711 states and 178307 transitions. [2024-11-08 17:37:43,770 INFO L240 hiAutomatonCegarLoop]: Abstraction has 96711 states and 178307 transitions. [2024-11-08 17:37:43,771 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-08 17:37:43,771 INFO L425 stractBuchiCegarLoop]: Abstraction has 96711 states and 178307 transitions. [2024-11-08 17:37:43,772 INFO L332 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2024-11-08 17:37:43,772 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 96711 states and 178307 transitions. [2024-11-08 17:37:44,132 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23236 [2024-11-08 17:37:44,133 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 17:37:44,133 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 17:37:44,138 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:37:44,138 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:37:44,139 INFO L745 eck$LassoCheckResult]: Stem: 771508#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 771509#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 776911#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 776591#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 772843#valid_product_returnLabel#1 main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 772844#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 772869#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 771137#initFloors_returnLabel#1 assume { :end_inline_initFloors } true; 771138#initTopDown_returnLabel#1 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 773382#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 772241#getOrigin_returnLabel#1 bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 776140#L525 assume 0 == initPersonOnFloor_~floor#1; 777340#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 771035#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 772990#L317 assume !(0 == callOnFloor_~floorID#1); 772992#L320 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 773691#L329-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 773537#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 773538#bobCall_returnLabel#1 havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 776450#getCurrentFloorID_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 776032#getCurrentHeading_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 776033#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 776252#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 777057#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 771962#buttonForFloorIsPressed_returnLabel#6 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 771963#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 771080#L2920 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 771081#L254 assume !(0 == isFloorCalling_~floorID#1); 776480#L258 assume !(1 == isFloorCalling_~floorID#1); 776170#L262 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 771890#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 771338#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 771340#L1201-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 775858#L1205-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 774913#buttonForFloorIsPressed_returnLabel#11 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 771958#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 771755#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 771756#L1948 assume !(0 != timeShift_~tmp___9~2#1); 776141#L2039 assume !(1 == ~doorState~0); 776142#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 774617#L1388 assume !(1 == stopRequestedInDirection_~dir#1); 774618#L1557 assume !(0 == ~currentFloorID~0); 779052#L1563 assume ~currentFloorID~0 > 0; 779051#L1564 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 773391#L254-6 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 773392#isFloorCalling_returnLabel#7 stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 777629#L1568 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 778768#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 778764#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 778754#L1764 assume !(1 == ~currentHeading~0); 778742#L1774 assume !(0 == ~currentFloorID~0); 778731#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 778722#L1780-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 778719#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 778717#L2945 assume !(-1 == ~expectedDirection~0); 778713#$Ultimate##2627 assume !(1 == ~expectedDirection~0); 778712#L2958 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 778711#timeShift_returnLabel#1 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 778710#getCurrentFloorID_returnLabel#2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 778709#getCurrentHeading_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 778705#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 778699#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 778694#$Ultimate##2732 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 778679#$Ultimate##2748 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 778670#$Ultimate##2764 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 778662#$Ultimate##2780 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 778659#L2920-1 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 778657#L254-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 778656#isFloorCalling_returnLabel#22 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 778654#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 778650#L1201-21 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 778651#buttonForFloorIsPressed_returnLabel#22 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 787676#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 787675#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 787673#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 787672#L2039-3 assume !(1 == ~doorState~0); 787670#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 787668#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 787669#L1557-2 assume !(0 == ~currentFloorID~0); 787706#L1563-2 assume ~currentFloorID~0 > 0; 788011#L1564-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 788012#L254-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 788014#isFloorCalling_returnLabel#28 stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 788009#L1568-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 788010#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 791646#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 791638#L1764-3 assume !(1 == ~currentHeading~0); 791635#L1774-9 assume !(0 == ~currentFloorID~0); 791633#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 784165#L1780-7 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 791627#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 791623#L2945-1 assume !(-1 == ~expectedDirection~0); 791622#$Ultimate##5124 assume !(1 == ~expectedDirection~0); 791374#L2958-1 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 791375#timeShift_returnLabel#2 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 784143#getCurrentFloorID_returnLabel#3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 784144#getCurrentHeading_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 783970#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 783971#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 781600#$Ultimate##5229 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 781596#$Ultimate##5245 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 781593#$Ultimate##5261 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 781567#$Ultimate##5277 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 781560#L2920-2 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 781557#L254-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 781547#isFloorCalling_returnLabel#43 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 781545#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 781539#L1201-32 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 781535#buttonForFloorIsPressed_returnLabel#33 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 781533#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 781532#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 781530#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 781529#L2039-6 assume !(1 == ~doorState~0); 781528#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 781521#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 781522#L1557-4 assume !(0 == ~currentFloorID~0); 777967#L1563-4 assume ~currentFloorID~0 > 0; 776011#L1564-4 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 776012#L254-48 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 777430#isFloorCalling_returnLabel#49 stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 777431#L1568-4 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 780355#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 780342#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 780338#L1764-6 assume !(1 == ~currentHeading~0); 780334#L1774-18 assume !(0 == ~currentFloorID~0); 780332#L1774-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 780317#L1780-13 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 780312#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 780310#L2945-2 assume !(-1 == ~expectedDirection~0); 780307#$Ultimate##7621 assume !(1 == ~expectedDirection~0); 780305#L2958-2 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 780304#timeShift_returnLabel#3 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 780303#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 780299#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 780293#getOrigin_returnLabel#2 bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 780288#L525-1 assume 0 == initPersonOnFloor_~floor#1; 780287#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 780257#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 780251#L317-2 assume !(0 == callOnFloor_~floorID#1); 780252#L320-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 807422#L329-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 807421#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 807420#bobCall_returnLabel#2 havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 780242#getCurrentFloorID_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 780240#getCurrentHeading_returnLabel#10 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 780241#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 780223#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 780217#$Ultimate##7858 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 780215#$Ultimate##7874 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 780200#$Ultimate##7890 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 780193#$Ultimate##7906 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 780187#L2920-3 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 780185#L254-63 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 780184#isFloorCalling_returnLabel#64 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 780182#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 780175#L1201-43 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 780176#buttonForFloorIsPressed_returnLabel#44 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 815276#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 815274#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 815270#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 815268#L2039-9 assume !(1 == ~doorState~0); 815266#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 815262#L1388-6 assume !(1 == stopRequestedInDirection_~dir#1); 815263#L1557-6 assume !(0 == ~currentFloorID~0); 778350#L1563-6 assume ~currentFloorID~0 > 0; 778349#L1564-6 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 778347#L254-69 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 778348#isFloorCalling_returnLabel#70 stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 774268#L1568-6 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 771048#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 807146#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 807144#L1764-9 assume !(1 == ~currentHeading~0); 807143#L1774-27 assume !(0 == ~currentFloorID~0); 807023#L1774-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 807009#L1780-19 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 807004#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 807000#L2945-3 assume !(-1 == ~expectedDirection~0); 806995#$Ultimate##10250 assume !(1 == ~expectedDirection~0); 806990#L2958-3 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 806988#timeShift_returnLabel#4 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 806986#L2586-2 [2024-11-08 17:37:44,141 INFO L747 eck$LassoCheckResult]: Loop: 806986#L2586-2 assume !false; 806985#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 806984#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 806982#isBlocked_returnLabel#1 cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 806983#L2594 assume 1 != cleanup_~tmp___0~8#1; 807401#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 807400#L254-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 807398#isFloorCalling_returnLabel#85 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 806974#L1292 assume !(0 != anyStopRequested_~tmp___3~0#1); 806976#L1296 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 815968#L254-85 assume !(0 == isFloorCalling_~floorID#1); 815969#L258-85 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 815954#isFloorCalling_returnLabel#86 anyStopRequested_#t~ret12#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret12#1;havoc anyStopRequested_#t~ret12#1; 815955#L1303 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 815931#anyStopRequested_returnLabel#1 isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 815932#isIdle_returnLabel#1 cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 815927#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 815928#getCurrentFloorID_returnLabel#5 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 815919#getCurrentHeading_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 815920#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 828170#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 808213#$Ultimate##10438 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 808210#$Ultimate##10454 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 808187#$Ultimate##10470 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 808175#$Ultimate##10486 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 808148#L2920-4 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 808142#L254-89 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 808136#isFloorCalling_returnLabel#90 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 808133#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 808127#L1201-54 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 808122#buttonForFloorIsPressed_returnLabel#55 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 808118#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 808116#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 808112#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 808110#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 808108#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 808104#L1388-8 assume !(1 == stopRequestedInDirection_~dir#1); 808105#L1557-8 assume !(0 == ~currentFloorID~0); 777769#L1563-8 assume ~currentFloorID~0 > 0; 777771#L1564-8 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 776929#L254-95 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 776930#isFloorCalling_returnLabel#96 stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 777933#L1568-8 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 777934#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 807765#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 807762#L1764-12 assume !(1 == ~currentHeading~0); 807028#L1774-36 assume !(0 == ~currentFloorID~0); 807019#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 807007#L1780-25 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 807003#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 806998#L2945-4 assume !(-1 == ~expectedDirection~0); 806991#$Ultimate##12830 assume !(1 == ~expectedDirection~0); 806989#L2958-4 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 806987#timeShift_returnLabel#5 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 806986#L2586-2 [2024-11-08 17:37:44,142 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:37:44,143 INFO L85 PathProgramCache]: Analyzing trace with hash 363387651, now seen corresponding path program 1 times [2024-11-08 17:37:44,143 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:37:44,143 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [92043187] [2024-11-08 17:37:44,144 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:37:44,144 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:37:44,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:37:44,403 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:37:44,403 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:37:44,403 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [92043187] [2024-11-08 17:37:44,403 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [92043187] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:37:44,403 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:37:44,404 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 17:37:44,404 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1013795925] [2024-11-08 17:37:44,404 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:37:44,405 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 17:37:44,405 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:37:44,405 INFO L85 PathProgramCache]: Analyzing trace with hash -1372075513, now seen corresponding path program 1 times [2024-11-08 17:37:44,407 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:37:44,407 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [807605417] [2024-11-08 17:37:44,407 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:37:44,407 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:37:44,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:37:44,487 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:37:44,488 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:37:44,488 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [807605417] [2024-11-08 17:37:44,488 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [807605417] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:37:44,489 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:37:44,489 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 17:37:44,489 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [662743452] [2024-11-08 17:37:44,489 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:37:44,490 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 17:37:44,490 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 17:37:44,490 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-08 17:37:44,491 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-08 17:37:44,491 INFO L87 Difference]: Start difference. First operand 96711 states and 178307 transitions. cyclomatic complexity: 81597 Second operand has 4 states, 4 states have (on average 13.5) internal successors, (54), 4 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:48,066 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 17:37:48,066 INFO L93 Difference]: Finished difference Result 99639 states and 183227 transitions. [2024-11-08 17:37:48,066 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 99639 states and 183227 transitions. [2024-11-08 17:37:48,415 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23562 [2024-11-08 17:37:49,255 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 99639 states to 97719 states and 179651 transitions. [2024-11-08 17:37:49,255 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 97719 [2024-11-08 17:37:49,314 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 97719 [2024-11-08 17:37:49,314 INFO L73 IsDeterministic]: Start isDeterministic. Operand 97719 states and 179651 transitions. [2024-11-08 17:37:49,357 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 17:37:49,358 INFO L218 hiAutomatonCegarLoop]: Abstraction has 97719 states and 179651 transitions. [2024-11-08 17:37:49,404 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97719 states and 179651 transitions. [2024-11-08 17:37:50,615 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97719 to 97519. [2024-11-08 17:37:50,690 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97519 states, 97519 states have (on average 1.8393441278109908) internal successors, (179371), 97518 states have internal predecessors, (179371), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:50,866 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97519 states to 97519 states and 179371 transitions. [2024-11-08 17:37:50,866 INFO L240 hiAutomatonCegarLoop]: Abstraction has 97519 states and 179371 transitions. [2024-11-08 17:37:50,867 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-08 17:37:50,867 INFO L425 stractBuchiCegarLoop]: Abstraction has 97519 states and 179371 transitions. [2024-11-08 17:37:50,867 INFO L332 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2024-11-08 17:37:50,868 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 97519 states and 179371 transitions. [2024-11-08 17:37:51,088 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23512 [2024-11-08 17:37:51,088 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 17:37:51,088 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 17:37:51,091 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:37:51,092 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:37:51,092 INFO L745 eck$LassoCheckResult]: Stem: 967868#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 967869#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 973103#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 972810#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 969194#valid_product_returnLabel#1 main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 969195#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 969220#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 967499#initFloors_returnLabel#1 assume { :end_inline_initFloors } true; 967500#initTopDown_returnLabel#1 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 969727#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 968595#getOrigin_returnLabel#1 bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 972385#L525 assume 0 == initPersonOnFloor_~floor#1; 973486#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 967397#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 969339#L317 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 969340#L329-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 990185#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 990184#bobCall_returnLabel#1 havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 990183#getCurrentFloorID_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 990182#getCurrentHeading_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 990180#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 990178#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 990179#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 990195#buttonForFloorIsPressed_returnLabel#6 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 990155#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 990143#L2920 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 990142#L254 assume !(0 == isFloorCalling_~floorID#1); 990141#L258 assume !(1 == isFloorCalling_~floorID#1); 990139#L262 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 990137#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 990136#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 990135#L1201-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 990131#L1205-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 990130#buttonForFloorIsPressed_returnLabel#11 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 990128#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 990127#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 990125#L1948 assume !(0 != timeShift_~tmp___9~2#1); 990124#L2039 assume !(1 == ~doorState~0); 990123#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 990120#L1388 assume !(1 == stopRequestedInDirection_~dir#1); 990121#L1557 assume !(0 == ~currentFloorID~0); 990901#L1563 assume ~currentFloorID~0 > 0; 990902#L1564 assume !(0 != stopRequestedInDirection_~respectFloorCalls#1); 990898#$Ultimate##2255 assume ~currentFloorID~0 > 0; 990899#L1580 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 992353#L1581 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 992354#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 992570#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 992568#L1764 assume !(1 == ~currentHeading~0); 992562#L1774 assume !(0 == ~currentFloorID~0); 992560#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 991498#L1780-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 992559#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 992557#L2945 assume !(-1 == ~expectedDirection~0); 992547#$Ultimate##2627 assume !(1 == ~expectedDirection~0); 992545#L2958 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 992544#timeShift_returnLabel#1 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 992543#getCurrentFloorID_returnLabel#2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 992542#getCurrentHeading_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 992541#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 992537#L2876-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 992538#L1201-16 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 998150#buttonForFloorIsPressed_returnLabel#17 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 996261#L2880-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 996259#L2920-1 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 996258#L254-21 assume !(0 == isFloorCalling_~floorID#1); 996257#L258-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 996253#isFloorCalling_returnLabel#22 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 996252#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 996251#L1201-21 assume !(0 == buttonForFloorIsPressed_~floorID#1); 996250#L1205-21 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 996246#buttonForFloorIsPressed_returnLabel#22 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 996244#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 996243#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 996241#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 996240#L2039-3 assume !(1 == ~doorState~0); 996239#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 996238#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 996237#L1557-2 assume !(0 == ~currentFloorID~0); 996235#L1563-2 assume ~currentFloorID~0 > 0; 996233#L1564-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 996234#L254-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 974103#isFloorCalling_returnLabel#28 stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 974104#L1568-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 974113#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 996145#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 996143#L1764-3 assume !(1 == ~currentHeading~0); 996137#L1774-9 assume !(0 == ~currentFloorID~0); 996133#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 996130#L1780-7 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 996125#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 996123#L2945-1 assume !(-1 == ~expectedDirection~0); 996119#$Ultimate##5124 assume !(1 == ~expectedDirection~0); 996118#L2958-1 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 996116#timeShift_returnLabel#2 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 996110#getCurrentFloorID_returnLabel#3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 996111#getCurrentHeading_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1056967#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1056968#L2876-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 998704#L1201-27 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 997238#buttonForFloorIsPressed_returnLabel#28 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 996079#L2880-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 996078#L2920-2 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 996077#L254-42 assume !(0 == isFloorCalling_~floorID#1); 996076#L258-42 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 996072#isFloorCalling_returnLabel#43 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 996068#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 996070#L1201-32 assume !(0 == buttonForFloorIsPressed_~floorID#1); 998407#L1205-32 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 997239#buttonForFloorIsPressed_returnLabel#33 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 996071#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 996066#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 996067#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 1004382#L2039-6 assume !(1 == ~doorState~0); 1039410#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1039408#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 1039409#L1557-4 assume !(0 == ~currentFloorID~0); 1039444#L1563-4 assume ~currentFloorID~0 > 0; 1039443#L1564-4 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1039442#L254-48 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1039439#isFloorCalling_returnLabel#49 stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1039350#L1568-4 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 984597#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1039322#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1039320#L1764-6 assume !(1 == ~currentHeading~0); 1039314#L1774-18 assume !(0 == ~currentFloorID~0); 1039313#L1774-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1039310#L1780-13 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1039307#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1039305#L2945-2 assume !(-1 == ~expectedDirection~0); 1039302#$Ultimate##7621 assume !(1 == ~expectedDirection~0); 1039300#L2958-2 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1039299#timeShift_returnLabel#3 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 1039298#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1039296#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 1039291#getOrigin_returnLabel#2 bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1039289#L525-1 assume 0 == initPersonOnFloor_~floor#1; 1039287#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1039255#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1039254#L317-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1039247#L329-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1039242#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1039240#bobCall_returnLabel#2 havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1039239#getCurrentFloorID_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1039238#getCurrentHeading_returnLabel#10 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1039235#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1039231#L2876-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1039232#L1201-38 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1039938#buttonForFloorIsPressed_returnLabel#39 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 1039200#L2880-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 1039195#L2920-3 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1039194#L254-63 assume !(0 == isFloorCalling_~floorID#1); 1039186#L258-63 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1039183#isFloorCalling_returnLabel#64 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1039182#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1039181#L1201-43 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1039178#L1205-43 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1039172#buttonForFloorIsPressed_returnLabel#44 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1039169#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1039166#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1039163#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 1039162#L2039-9 assume !(1 == ~doorState~0); 1039161#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1039159#L1388-6 assume !(1 == stopRequestedInDirection_~dir#1); 1039158#L1557-6 assume !(0 == ~currentFloorID~0); 1039156#L1563-6 assume ~currentFloorID~0 > 0; 1039154#L1564-6 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1039155#L254-69 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1039997#isFloorCalling_returnLabel#70 stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1039105#L1568-6 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1019156#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1039100#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1039096#L1764-9 assume !(1 == ~currentHeading~0); 1039093#L1774-27 assume !(0 == ~currentFloorID~0); 1034888#L1774-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1034877#L1780-19 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1034874#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1034867#L2945-3 assume !(-1 == ~expectedDirection~0); 1034862#$Ultimate##10250 assume !(1 == ~expectedDirection~0); 1034859#L2958-3 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1034856#timeShift_returnLabel#4 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1034853#L2586-2 [2024-11-08 17:37:51,094 INFO L747 eck$LassoCheckResult]: Loop: 1034853#L2586-2 assume !false; 1034851#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1034849#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1034847#isBlocked_returnLabel#1 cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 1034845#L2594 assume 1 != cleanup_~tmp___0~8#1; 1034843#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1034841#L254-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1034839#isFloorCalling_returnLabel#85 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 1034838#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1034835#anyStopRequested_returnLabel#1 isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1034834#isIdle_returnLabel#1 cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 1034833#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1034832#getCurrentFloorID_returnLabel#5 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1034831#getCurrentHeading_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1034829#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1034830#L2876-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 983177#L1201-49 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 983172#buttonForFloorIsPressed_returnLabel#50 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 983169#L2880-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 983163#L2920-4 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1020070#L254-89 assume !(0 == isFloorCalling_~floorID#1); 1020069#L258-89 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1020065#isFloorCalling_returnLabel#90 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1020044#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1020045#L1201-54 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1020058#L1205-54 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1020054#buttonForFloorIsPressed_returnLabel#55 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1020046#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1020047#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1020037#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 1003617#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1003616#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1003614#L1388-8 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1003615#isTopFloor_returnLabel#21 stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 1040643#L1392-8 assume !(0 != stopRequestedInDirection_~tmp~5#1); 1040641#L1398-8 assume !(~currentFloorID~0 < 0); 1040639#$Ultimate##12346 assume ~currentFloorID~0 < 0; 1040640#L1415-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 970360#L1416-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 968641#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1064180#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1064179#L1764-12 assume !(1 == ~currentHeading~0); 1057896#L1774-36 assume !(0 == ~currentFloorID~0); 973112#L1774-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 973113#L1780-25 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1040564#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1040562#L2945-4 assume !(-1 == ~expectedDirection~0); 1040558#$Ultimate##12830 assume !(1 == ~expectedDirection~0); 1040557#L2958-4 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1034855#timeShift_returnLabel#5 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1034853#L2586-2 [2024-11-08 17:37:51,094 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:37:51,094 INFO L85 PathProgramCache]: Analyzing trace with hash 1750202236, now seen corresponding path program 1 times [2024-11-08 17:37:51,095 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:37:51,095 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2128190013] [2024-11-08 17:37:51,095 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:37:51,095 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:37:51,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:37:51,290 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:37:51,290 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:37:51,290 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2128190013] [2024-11-08 17:37:51,290 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2128190013] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:37:51,290 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:37:51,291 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 17:37:51,291 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1239858016] [2024-11-08 17:37:51,291 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:37:51,291 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 17:37:51,292 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:37:51,292 INFO L85 PathProgramCache]: Analyzing trace with hash -1462867874, now seen corresponding path program 1 times [2024-11-08 17:37:51,292 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:37:51,292 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1242537326] [2024-11-08 17:37:51,293 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:37:51,293 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:37:51,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:37:51,381 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:37:51,381 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:37:51,381 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1242537326] [2024-11-08 17:37:51,382 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1242537326] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:37:51,382 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:37:51,382 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-08 17:37:51,382 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1067979437] [2024-11-08 17:37:51,382 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:37:51,383 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 17:37:51,383 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 17:37:51,384 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-08 17:37:51,385 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-08 17:37:51,385 INFO L87 Difference]: Start difference. First operand 97519 states and 179371 transitions. cyclomatic complexity: 81853 Second operand has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 6 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:53,338 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 17:37:53,338 INFO L93 Difference]: Finished difference Result 139973 states and 257575 transitions. [2024-11-08 17:37:53,338 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 139973 states and 257575 transitions. [2024-11-08 17:37:54,063 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 34214 [2024-11-08 17:37:55,219 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 139973 states to 139973 states and 257575 transitions. [2024-11-08 17:37:55,219 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 139973 [2024-11-08 17:37:55,309 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 139973 [2024-11-08 17:37:55,309 INFO L73 IsDeterministic]: Start isDeterministic. Operand 139973 states and 257575 transitions. [2024-11-08 17:37:55,374 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-08 17:37:55,374 INFO L218 hiAutomatonCegarLoop]: Abstraction has 139973 states and 257575 transitions. [2024-11-08 17:37:55,436 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 139973 states and 257575 transitions. [2024-11-08 17:37:56,763 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 139973 to 126755. [2024-11-08 17:37:56,859 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 126755 states, 126755 states have (on average 1.837410753027494) internal successors, (232901), 126754 states have internal predecessors, (232901), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:57,154 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 126755 states to 126755 states and 232901 transitions. [2024-11-08 17:37:57,154 INFO L240 hiAutomatonCegarLoop]: Abstraction has 126755 states and 232901 transitions. [2024-11-08 17:37:57,155 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-08 17:37:57,155 INFO L425 stractBuchiCegarLoop]: Abstraction has 126755 states and 232901 transitions. [2024-11-08 17:37:57,155 INFO L332 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2024-11-08 17:37:57,155 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 126755 states and 232901 transitions. [2024-11-08 17:37:57,463 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 30890 [2024-11-08 17:37:57,463 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-08 17:37:57,463 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-08 17:37:57,465 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:37:57,465 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-08 17:37:57,466 INFO L745 eck$LassoCheckResult]: Stem: 1205371#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1205372#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 1210632#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1210322#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 1206679#valid_product_returnLabel#1 main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 1206680#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 1206705#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1205008#initFloors_returnLabel#1 assume { :end_inline_initFloors } true; 1205009#initTopDown_returnLabel#1 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1207213#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 1206093#getOrigin_returnLabel#1 bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1209906#L525 assume 0 == initPersonOnFloor_~floor#1; 1211025#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1204906#L633-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1206824#L317 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1206825#L329-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1207372#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1207373#bobCall_returnLabel#1 havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1210192#getCurrentFloorID_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1209805#getCurrentHeading_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1209806#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1210008#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1210766#L1201-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1205816#buttonForFloorIsPressed_returnLabel#6 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 1205817#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 1204951#L2920 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1204952#L254 assume !(0 == isFloorCalling_~floorID#1); 1210217#L258 assume !(1 == isFloorCalling_~floorID#1); 1209934#L262 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1205747#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1205201#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1205203#L1201-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1209632#L1205-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1208719#buttonForFloorIsPressed_returnLabel#11 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1205811#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1205812#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1211426#L1948 assume !(0 != timeShift_~tmp___9~2#1); 1209907#L2039 assume !(1 == ~doorState~0); 1209908#L2039-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1208428#L1388 assume !(1 == stopRequestedInDirection_~dir#1); 1208429#L1557 assume !(0 == ~currentFloorID~0); 1208680#L1563 assume ~currentFloorID~0 > 0; 1208682#L1564 assume !(0 != stopRequestedInDirection_~respectFloorCalls#1); 1209035#$Ultimate##2255 assume ~currentFloorID~0 > 0; 1210106#L1580 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 1210108#L1581 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1211162#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1211460#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1211461#L1764 assume !(1 == ~currentHeading~0); 1211142#L1774 assume !(0 == ~currentFloorID~0); 1211143#L1774-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1210843#L1780-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1210844#L2056-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1234111#L2945 assume !(-1 == ~expectedDirection~0); 1234101#$Ultimate##2627 assume !(1 == ~expectedDirection~0); 1234100#L2958 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1234099#timeShift_returnLabel#1 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1234098#getCurrentFloorID_returnLabel#2 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1234097#getCurrentHeading_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1234096#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1213670#L2876-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1234092#L1201-16 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1234086#buttonForFloorIsPressed_returnLabel#17 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 1234080#L2880-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 1234079#L2920-1 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1234078#L254-21 assume !(0 == isFloorCalling_~floorID#1); 1234077#L258-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1234069#isFloorCalling_returnLabel#22 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1234065#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1234066#L1201-21 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1234073#L1205-21 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1234068#buttonForFloorIsPressed_returnLabel#22 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1234067#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1234064#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1234061#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 1232387#L2039-3 assume !(1 == ~doorState~0); 1232385#L2039-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1232384#L1388-2 assume !(1 == stopRequestedInDirection_~dir#1); 1232383#L1557-2 assume !(0 == ~currentFloorID~0); 1232381#L1563-2 assume ~currentFloorID~0 > 0; 1232380#L1564-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1206660#L254-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1206661#isFloorCalling_returnLabel#28 stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1209625#L1568-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1205775#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1245155#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1211076#L1764-3 assume !(1 == ~currentHeading~0); 1211077#L1774-9 assume !(0 == ~currentFloorID~0); 1206525#L1774-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1206526#L1780-7 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1207310#L2056-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1317866#L2945-1 assume !(-1 == ~expectedDirection~0); 1317851#$Ultimate##5124 assume !(1 == ~expectedDirection~0); 1317852#L2958-1 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1317843#timeShift_returnLabel#2 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1317844#getCurrentFloorID_returnLabel#3 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1317677#getCurrentHeading_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1317678#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1221502#L2876-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1282822#L1201-27 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1282817#buttonForFloorIsPressed_returnLabel#28 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 1282813#L2880-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 1282812#L2920-2 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1282811#L254-42 assume !(0 == isFloorCalling_~floorID#1); 1282810#L258-42 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1282806#isFloorCalling_returnLabel#43 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1282805#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1282804#L1201-32 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1282803#L1205-32 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1282799#buttonForFloorIsPressed_returnLabel#33 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1282797#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1282791#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1282789#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 1205300#L2039-6 assume !(1 == ~doorState~0); 1205301#L2039-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1207411#L1388-4 assume !(1 == stopRequestedInDirection_~dir#1); 1209997#L1557-4 assume !(0 == ~currentFloorID~0); 1210822#L1563-4 assume ~currentFloorID~0 > 0; 1209783#L1564-4 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1209784#L254-48 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1211111#isFloorCalling_returnLabel#49 stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1209846#L1568-4 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1205241#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1248513#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1211165#L1764-6 assume !(1 == ~currentHeading~0); 1211166#L1774-18 assume !(0 == ~currentFloorID~0); 1275349#L1774-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1308893#L1780-13 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1308888#L2056-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1299051#L2945-2 assume !(-1 == ~expectedDirection~0); 1299046#$Ultimate##7621 assume !(1 == ~expectedDirection~0); 1299029#L2958-2 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1299025#timeShift_returnLabel#3 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 1298811#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1297492#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 1297487#getOrigin_returnLabel#2 bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1297482#L525-1 assume 0 == initPersonOnFloor_~floor#1; 1297483#L526-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1331163#L633-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1331162#L317-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1296847#L329-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1331157#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1331156#bobCall_returnLabel#2 havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1331155#getCurrentFloorID_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1331154#getCurrentHeading_returnLabel#10 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1331153#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1275195#L2876-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1297403#L1201-38 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1297396#buttonForFloorIsPressed_returnLabel#39 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 1297390#L2880-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 1297389#L2920-3 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1297388#L254-63 assume !(0 == isFloorCalling_~floorID#1); 1297369#L258-63 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1297366#isFloorCalling_returnLabel#64 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1297365#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1297364#L1201-43 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1297361#L1205-43 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1297359#buttonForFloorIsPressed_returnLabel#44 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1297357#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1297356#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1297354#L1948-6 assume !(0 != timeShift_~tmp___9~2#1); 1297353#L2039-9 assume !(1 == ~doorState~0); 1297352#L2039-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1297351#L1388-6 assume !(1 == stopRequestedInDirection_~dir#1); 1297350#L1557-6 assume !(0 == ~currentFloorID~0); 1297349#L1563-6 assume ~currentFloorID~0 > 0; 1208605#L1564-6 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1206069#L254-69 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1206070#isFloorCalling_returnLabel#70 stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1208084#L1568-6 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1204919#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1330873#L2047-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1209422#L1764-9 assume !(1 == ~currentHeading~0); 1209423#L1774-27 assume !(0 == ~currentFloorID~0); 1211182#L1774-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1276602#L1780-19 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1330701#L2056-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1317542#L2945-3 assume !(-1 == ~expectedDirection~0); 1317544#$Ultimate##10250 assume !(1 == ~expectedDirection~0); 1317534#L2958-3 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1317535#timeShift_returnLabel#4 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1317527#L2586-2 [2024-11-08 17:37:57,467 INFO L747 eck$LassoCheckResult]: Loop: 1317527#L2586-2 assume !false; 1317528#L2587 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1317521#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1317522#isBlocked_returnLabel#1 cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 1317517#L2594 assume 1 != cleanup_~tmp___0~8#1; 1317518#L2594-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1317513#L254-84 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1317514#isFloorCalling_returnLabel#85 anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 1317510#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1296457#anyStopRequested_returnLabel#1 isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1317475#isIdle_returnLabel#1 cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 1317476#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1317467#getCurrentFloorID_returnLabel#5 __utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1317468#getCurrentHeading_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1315583#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1272152#L2876-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1296900#L1201-49 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1296987#buttonForFloorIsPressed_returnLabel#50 __utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 1296984#L2880-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 1296912#L2920-4 havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1206054#L254-89 assume !(0 == isFloorCalling_~floorID#1); 1206055#L258-89 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1207939#isFloorCalling_returnLabel#90 stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1325869#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1206963#L1201-54 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1206622#L1205-54 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1206624#buttonForFloorIsPressed_returnLabel#55 stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1205868#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1205870#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1325758#L1948-8 assume !(0 != timeShift_~tmp___9~2#1); 1210987#L2039-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1210787#L2039-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1210788#L1388-8 assume !(1 == stopRequestedInDirection_~dir#1); 1211350#L1557-8 assume !(0 == ~currentFloorID~0); 1248637#L1563-8 assume ~currentFloorID~0 > 0; 1206151#L1564-8 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1206152#L254-95 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1207477#isFloorCalling_returnLabel#96 stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1207478#L1568-8 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1208327#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1326042#L2047-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1210905#L1764-12 assume !(1 == ~currentHeading~0); 1210906#L1774-36 assume !(0 == ~currentFloorID~0); 1209094#L1774-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1276599#L1780-25 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1325884#L2056-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1325882#L2945-4 assume !(-1 == ~expectedDirection~0); 1325873#$Ultimate##12830 assume !(1 == ~expectedDirection~0); 1325872#L2958-4 havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1325871#timeShift_returnLabel#5 havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1317527#L2586-2 [2024-11-08 17:37:57,468 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:37:57,468 INFO L85 PathProgramCache]: Analyzing trace with hash -769757698, now seen corresponding path program 1 times [2024-11-08 17:37:57,468 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:37:57,468 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [103729162] [2024-11-08 17:37:57,469 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:37:57,469 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:37:57,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:37:57,640 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:37:57,640 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:37:57,641 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [103729162] [2024-11-08 17:37:57,641 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [103729162] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:37:57,641 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:37:57,641 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-08 17:37:57,641 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [683841103] [2024-11-08 17:37:57,641 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:37:57,642 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-08 17:37:57,642 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-08 17:37:57,642 INFO L85 PathProgramCache]: Analyzing trace with hash 218405172, now seen corresponding path program 1 times [2024-11-08 17:37:57,642 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-08 17:37:57,643 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [379544495] [2024-11-08 17:37:57,643 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-08 17:37:57,643 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-08 17:37:57,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-08 17:37:57,682 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-08 17:37:57,682 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-08 17:37:57,683 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [379544495] [2024-11-08 17:37:57,683 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [379544495] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-08 17:37:57,683 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-08 17:37:57,683 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-08 17:37:57,683 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [378068794] [2024-11-08 17:37:57,683 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-08 17:37:57,684 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-08 17:37:57,684 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-08 17:37:57,684 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-08 17:37:57,684 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-08 17:37:57,685 INFO L87 Difference]: Start difference. First operand 126755 states and 232901 transitions. cyclomatic complexity: 106147 Second operand has 3 states, 3 states have (on average 16.666666666666668) internal successors, (50), 3 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-08 17:37:59,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-08 17:37:59,221 INFO L93 Difference]: Finished difference Result 189909 states and 349093 transitions. [2024-11-08 17:37:59,221 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 189909 states and 349093 transitions.