./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec3_product01.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 3289d67d Calling Ultimate with: /root/.sdkman/candidates/java/11.0.12-open/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec3_product01.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 2e63e44256bba8522bf99795cd1238c2e8ad8456659e8a545df838f8f88bd318 --- Real Ultimate output --- This is Ultimate 0.2.5-tmp.fs.icfgbuilder-eval-3289d67-m [2024-11-17 08:38:53,135 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-17 08:38:53,211 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2024-11-17 08:38:53,216 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-17 08:38:53,219 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-17 08:38:53,219 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder.Remove goto edges from RCFG [2024-11-17 08:38:53,247 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-17 08:38:53,250 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-17 08:38:53,250 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-17 08:38:53,252 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-17 08:38:53,253 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-17 08:38:53,253 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-17 08:38:53,254 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-17 08:38:53,257 INFO L153 SettingsManager]: * Use SBE=true [2024-11-17 08:38:53,257 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2024-11-17 08:38:53,257 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2024-11-17 08:38:53,258 INFO L153 SettingsManager]: * Use old map elimination=false [2024-11-17 08:38:53,258 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2024-11-17 08:38:53,258 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2024-11-17 08:38:53,259 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2024-11-17 08:38:53,259 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-17 08:38:53,261 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2024-11-17 08:38:53,262 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-17 08:38:53,262 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-17 08:38:53,262 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-17 08:38:53,262 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-17 08:38:53,263 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2024-11-17 08:38:53,263 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2024-11-17 08:38:53,263 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2024-11-17 08:38:53,263 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-17 08:38:53,264 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2024-11-17 08:38:53,264 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-17 08:38:53,264 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-17 08:38:53,264 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2024-11-17 08:38:53,265 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-17 08:38:53,265 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2024-11-17 08:38:53,266 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-17 08:38:53,266 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-17 08:38:53,267 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-17 08:38:53,267 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2024-11-17 08:38:53,267 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 2e63e44256bba8522bf99795cd1238c2e8ad8456659e8a545df838f8f88bd318 [2024-11-17 08:38:53,556 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-17 08:38:53,586 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-17 08:38:53,589 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-17 08:38:53,591 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-17 08:38:53,591 INFO L274 PluginConnector]: CDTParser initialized [2024-11-17 08:38:53,593 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec3_product01.cil.c [2024-11-17 08:38:55,115 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-17 08:38:55,470 INFO L384 CDTParser]: Found 1 translation units. [2024-11-17 08:38:55,471 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec3_product01.cil.c [2024-11-17 08:38:55,493 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4f877c471/0070c20d7a6245a0a327885230898aa9/FLAG9225286c7 [2024-11-17 08:38:55,705 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4f877c471/0070c20d7a6245a0a327885230898aa9 [2024-11-17 08:38:55,708 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-17 08:38:55,709 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-17 08:38:55,710 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-17 08:38:55,711 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-17 08:38:55,719 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-17 08:38:55,720 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 08:38:55" (1/1) ... [2024-11-17 08:38:55,721 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@76cb7ada and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:55, skipping insertion in model container [2024-11-17 08:38:55,722 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 08:38:55" (1/1) ... [2024-11-17 08:38:55,791 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-17 08:38:56,357 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-17 08:38:56,376 INFO L200 MainTranslator]: Completed pre-run [2024-11-17 08:38:56,387 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [48] [2024-11-17 08:38:56,389 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [408] [2024-11-17 08:38:56,389 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [528] [2024-11-17 08:38:56,390 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [620] [2024-11-17 08:38:56,390 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [1287] [2024-11-17 08:38:56,390 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [1477] [2024-11-17 08:38:56,391 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [1843] [2024-11-17 08:38:56,391 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [1878] [2024-11-17 08:38:56,391 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1893] [2024-11-17 08:38:56,391 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [1902] [2024-11-17 08:38:56,490 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-17 08:38:56,521 INFO L204 MainTranslator]: Completed translation [2024-11-17 08:38:56,522 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:56 WrapperNode [2024-11-17 08:38:56,522 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-17 08:38:56,523 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-17 08:38:56,523 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-17 08:38:56,524 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-17 08:38:56,530 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:56" (1/1) ... [2024-11-17 08:38:56,557 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:56" (1/1) ... [2024-11-17 08:38:56,836 INFO L138 Inliner]: procedures = 86, calls = 335, calls flagged for inlining = 188, calls inlined = 563, statements flattened = 19295 [2024-11-17 08:38:56,836 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-17 08:38:56,837 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-17 08:38:56,837 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-17 08:38:56,837 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-17 08:38:56,848 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:56" (1/1) ... [2024-11-17 08:38:56,848 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:56" (1/1) ... [2024-11-17 08:38:56,885 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:56" (1/1) ... [2024-11-17 08:38:56,970 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2024-11-17 08:38:56,970 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:56" (1/1) ... [2024-11-17 08:38:56,971 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:56" (1/1) ... [2024-11-17 08:38:57,078 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:56" (1/1) ... [2024-11-17 08:38:57,094 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:56" (1/1) ... [2024-11-17 08:38:57,117 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:56" (1/1) ... [2024-11-17 08:38:57,143 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:56" (1/1) ... [2024-11-17 08:38:57,187 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-17 08:38:57,188 INFO L112 PluginConnector]: ------------------------IcfgBuilder---------------------------- [2024-11-17 08:38:57,189 INFO L270 PluginConnector]: Initializing IcfgBuilder... [2024-11-17 08:38:57,189 INFO L274 PluginConnector]: IcfgBuilder initialized [2024-11-17 08:38:57,190 INFO L184 PluginConnector]: Executing the observer IcfgBuilderObserver from plugin IcfgBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:56" (1/1) ... [2024-11-17 08:38:57,195 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-17 08:38:57,208 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-17 08:38:57,226 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-17 08:38:57,232 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2024-11-17 08:38:57,322 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-17 08:38:57,322 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-17 08:38:57,323 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-11-17 08:38:57,323 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-11-17 08:38:57,323 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-11-17 08:38:57,323 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-11-17 08:38:57,323 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-11-17 08:38:57,323 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2024-11-17 08:38:57,323 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2024-11-17 08:38:57,324 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2024-11-17 08:38:57,324 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2024-11-17 08:38:57,324 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2024-11-17 08:38:57,324 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2024-11-17 08:38:57,324 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2024-11-17 08:38:57,324 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2024-11-17 08:38:57,325 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2024-11-17 08:38:57,325 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2024-11-17 08:38:57,325 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2024-11-17 08:38:57,325 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2024-11-17 08:38:57,325 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2024-11-17 08:38:57,325 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2024-11-17 08:38:57,325 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-17 08:38:57,325 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-17 08:38:57,526 INFO L256 CfgBuilder]: Building ICFG [2024-11-17 08:38:57,527 INFO L286 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-17 08:39:06,377 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2103-1: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; [2024-11-17 08:39:06,377 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2103-3: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; [2024-11-17 08:39:06,378 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2103-5: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; [2024-11-17 08:39:06,378 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2103-7: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; [2024-11-17 08:39:06,378 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2103-9: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; [2024-11-17 08:39:06,378 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-1: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,378 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-3: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,378 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-5: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,378 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-7: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,378 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-9: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,378 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-11: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,378 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-13: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,378 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-15: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,378 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-17: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,379 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-19: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,379 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-21: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,379 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-23: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,379 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-25: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,379 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-27: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,379 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-29: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,379 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2640-1: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; [2024-11-17 08:39:06,379 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-31: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,379 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2640-3: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; [2024-11-17 08:39:06,380 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-33: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,380 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-35: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,380 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2640-5: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; [2024-11-17 08:39:06,380 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-37: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,380 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2640-7: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; [2024-11-17 08:39:06,380 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-39: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,380 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2640-9: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; [2024-11-17 08:39:06,380 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-41: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,380 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2640-11: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; [2024-11-17 08:39:06,380 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-43: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,380 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2640-13: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; [2024-11-17 08:39:06,381 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-45: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,381 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2640-15: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; [2024-11-17 08:39:06,381 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-47: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,381 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2640-17: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; [2024-11-17 08:39:06,381 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-49: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,382 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2640-19: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; [2024-11-17 08:39:06,382 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-51: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,382 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-53: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,382 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-55: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,383 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-57: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,383 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-59: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,383 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-61: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,383 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-63: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,383 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-65: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,383 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-67: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,384 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-69: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,384 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-71: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,384 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-73: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,385 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-75: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,385 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-77: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,385 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-79: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,385 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-81: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,385 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-83: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,385 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-85: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,385 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-87: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,386 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-89: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,386 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-91: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,386 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-93: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,386 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-95: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,386 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-97: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,386 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-99: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,386 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-101: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,386 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-103: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,386 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-105: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,386 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-107: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,386 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-109: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,386 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-111: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,387 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-113: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,387 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-115: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,387 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-117: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,387 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L525-119: getDestination_#res#1 := getDestination_~retValue_acc~4#1; [2024-11-17 08:39:06,387 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-1: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,387 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-3: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,387 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-5: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,387 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-7: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,387 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-9: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,388 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-11: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,388 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-13: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,388 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-15: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,388 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-17: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,388 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-19: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,388 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-21: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,388 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-23: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,388 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-25: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,388 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-27: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,388 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-29: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,388 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-31: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,388 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-33: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,389 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-35: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,389 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-37: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,389 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-39: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,389 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-41: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,389 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-43: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,389 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-45: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,391 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-47: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,391 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-49: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,391 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-51: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,392 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-53: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,392 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-55: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,392 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-57: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,392 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-59: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,392 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-61: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,392 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-63: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,393 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-65: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,393 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-67: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,394 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-69: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,394 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-71: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,394 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-73: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,394 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-75: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,394 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-77: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,394 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-79: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,395 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-81: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,395 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-83: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,397 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-85: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,397 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-87: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,397 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-89: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,398 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-91: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,398 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-93: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,398 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-95: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,398 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-97: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,398 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-99: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,399 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-101: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,399 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-103: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,399 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-105: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,400 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-107: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,400 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2146-109: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; [2024-11-17 08:39:06,400 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2155-1: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,400 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2155-3: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,400 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2155-5: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,400 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2155-7: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,400 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2155-9: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,400 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2155-11: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,400 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2155-13: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,401 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2155-15: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,401 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2155-17: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,401 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2155-19: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,401 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2155-21: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,401 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2155-23: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,401 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2155-25: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,401 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2155-27: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,401 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2155-29: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,401 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2730-1: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; [2024-11-17 08:39:06,401 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2730-3: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; [2024-11-17 08:39:06,401 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2730-5: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; [2024-11-17 08:39:06,402 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2730-7: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; [2024-11-17 08:39:06,402 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2730-9: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; [2024-11-17 08:39:06,402 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2744-1: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; [2024-11-17 08:39:06,402 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2744-3: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; [2024-11-17 08:39:06,402 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2744-5: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; [2024-11-17 08:39:06,402 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2744-7: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; [2024-11-17 08:39:06,402 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2744-9: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; [2024-11-17 08:39:06,402 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2744-11: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; [2024-11-17 08:39:06,402 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2744-13: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; [2024-11-17 08:39:06,402 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2744-15: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; [2024-11-17 08:39:06,403 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2744-17: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; [2024-11-17 08:39:06,404 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2744-19: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; [2024-11-17 08:39:06,404 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2275-1: anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; [2024-11-17 08:39:06,404 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2288-1: isIdle_#res#1 := isIdle_~retValue_acc~20#1; [2024-11-17 08:39:06,405 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-1: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,405 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-3: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,405 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-5: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,405 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-7: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,405 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-9: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,405 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-11: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,406 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-13: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,406 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-15: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,406 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-17: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,406 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-19: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,406 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-21: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,406 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-23: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,407 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-25: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,407 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-27: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,407 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-29: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,407 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-31: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,407 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-33: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,407 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-35: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,407 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-37: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,407 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-39: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,408 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-41: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,408 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-43: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,408 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-45: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,408 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-47: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,408 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-49: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,408 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-51: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,408 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-53: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,408 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-55: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,408 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-57: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,409 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-59: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,409 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-61: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,409 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-63: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,409 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-65: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,409 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-67: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,409 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-69: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,409 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-71: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,409 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-73: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,409 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-75: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,409 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-77: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,409 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-79: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,410 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-81: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,410 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-83: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,410 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-85: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,410 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-87: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,410 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-89: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,411 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-91: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,411 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-93: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,411 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-95: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,411 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-97: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,411 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-99: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,412 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-101: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,412 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-103: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,412 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-105: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,412 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-107: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,413 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-109: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,413 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-111: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,413 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-113: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,413 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-115: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,413 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-117: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,413 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-119: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,413 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-121: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,413 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-123: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,413 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-125: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,414 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-127: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,414 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-129: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,414 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-131: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,414 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-133: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,414 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-135: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,414 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-137: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,414 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-139: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,414 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-141: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,414 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-143: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,414 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-145: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,414 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-147: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,414 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-149: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,414 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-151: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,415 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-153: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,415 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-155: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,415 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-157: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,415 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-159: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,415 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-161: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,415 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-163: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,415 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-165: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,415 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-167: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,415 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-169: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,415 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-171: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,415 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-173: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,415 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-175: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,416 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-177: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,416 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-179: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,416 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-181: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,416 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-183: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,416 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-185: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,417 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-187: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,418 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-189: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,418 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-191: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,418 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-193: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,418 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-195: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,418 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-197: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,418 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-199: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,418 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-201: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,418 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-203: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,418 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-205: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,418 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-207: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,418 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-209: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,419 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-211: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,419 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-213: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,419 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-215: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,419 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-217: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,419 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L737-219: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; [2024-11-17 08:39:06,419 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-1: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,419 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-3: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,419 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-5: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,419 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-7: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,419 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-9: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,420 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-11: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,420 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-13: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,420 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-15: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,420 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-17: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,420 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-19: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,420 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-21: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,420 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-23: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,420 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-25: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,420 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-27: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,420 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-29: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,420 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-31: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,421 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-33: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,421 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-35: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,421 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-37: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,421 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-39: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,421 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-41: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,421 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-43: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,421 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-45: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,421 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-47: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,421 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1284-49: isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; [2024-11-17 08:39:06,422 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1875-1: valid_product_#res#1 := valid_product_~retValue_acc~12#1; [2024-11-17 08:39:06,422 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1974-1: isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; [2024-11-17 08:39:06,422 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L405-1: main_#res#1 := main_~retValue_acc~1#1; [2024-11-17 08:39:06,423 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-1: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,423 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-3: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,423 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-5: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,423 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-7: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,423 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-9: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,423 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-11: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,423 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-13: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,423 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-15: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,423 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-17: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,423 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-19: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,423 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-21: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,423 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-23: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,424 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-25: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,424 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-27: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,424 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-29: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,424 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-31: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,424 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-33: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,424 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-35: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,424 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-37: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,424 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-39: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,424 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-41: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,424 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-43: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,424 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-45: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,424 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-47: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,424 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-49: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,425 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-51: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,425 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-53: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,425 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-55: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,425 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-57: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,425 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L973-59: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; [2024-11-17 08:39:06,425 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L486-1: getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; [2024-11-17 08:39:06,425 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L486-3: getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; [2024-11-17 08:39:07,906 INFO L? ?]: Removed 9090 outVars from TransFormulas that were not future-live. [2024-11-17 08:39:07,906 INFO L307 CfgBuilder]: Performing block encoding [2024-11-17 08:39:08,004 INFO L331 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-17 08:39:08,005 INFO L336 CfgBuilder]: Removed 0 assume(true) statements. [2024-11-17 08:39:08,005 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 17.11 08:39:08 BoogieIcfgContainer [2024-11-17 08:39:08,006 INFO L131 PluginConnector]: ------------------------ END IcfgBuilder---------------------------- [2024-11-17 08:39:08,006 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2024-11-17 08:39:08,006 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2024-11-17 08:39:08,010 INFO L274 PluginConnector]: BuchiAutomizer initialized [2024-11-17 08:39:08,010 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-17 08:39:08,011 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 17.11 08:38:55" (1/3) ... [2024-11-17 08:39:08,013 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@4d810e29 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 17.11 08:39:08, skipping insertion in model container [2024-11-17 08:39:08,013 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-17 08:39:08,013 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:56" (2/3) ... [2024-11-17 08:39:08,014 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@4d810e29 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 17.11 08:39:08, skipping insertion in model container [2024-11-17 08:39:08,014 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-17 08:39:08,014 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 17.11 08:39:08" (3/3) ... [2024-11-17 08:39:08,015 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product01.cil.c [2024-11-17 08:39:08,154 INFO L300 stractBuchiCegarLoop]: Interprodecural is true [2024-11-17 08:39:08,154 INFO L301 stractBuchiCegarLoop]: Hoare is None [2024-11-17 08:39:08,154 INFO L302 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2024-11-17 08:39:08,155 INFO L303 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2024-11-17 08:39:08,155 INFO L304 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2024-11-17 08:39:08,155 INFO L305 stractBuchiCegarLoop]: Difference is false [2024-11-17 08:39:08,155 INFO L306 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2024-11-17 08:39:08,155 INFO L310 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2024-11-17 08:39:08,180 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5959 states, 5958 states have (on average 1.8472641826116147) internal successors, (11006), 5958 states have internal predecessors, (11006), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:08,339 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1207 [2024-11-17 08:39:08,339 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:08,340 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:08,367 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:08,368 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:08,368 INFO L332 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2024-11-17 08:39:08,385 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5959 states, 5958 states have (on average 1.8472641826116147) internal successors, (11006), 5958 states have internal predecessors, (11006), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:08,468 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1207 [2024-11-17 08:39:08,468 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:08,468 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:08,476 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:08,479 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:08,488 INFO L745 eck$LassoCheckResult]: Stem: 3695#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 4506#ULTIMATE.init_returnLabel#1true assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 3125#L1866true assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5287#L1859true assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 367#L1874true assume true;main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 2161#L395true assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 2197#L368true assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 988#L702true assume true;assume { :end_inline_initFloors } true; 5314#L1942true assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1209#L454-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1589#L479-1true assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2874#L980-1true assume 0 == initPersonOnFloor_~floor#1; 2273#L981-1true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 4434#L1122-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 4300#L772-1true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 3354#L793-1true assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 4887#L1124-1true assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 3731#L113-1true assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 3704#L2102-4true assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 410#L2154-14true assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 5069#L1315-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 5100#L1316-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 3301#L2119-45true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1356#L2140-45true assume true;__utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 43#L1320-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 5030#L1438-4true assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1001#L709-109true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 4567#L727-109true assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 486#L2715-4true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 2492#L2727-4true assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 728#L2864-4true assume !(0 != timeShift_~tmp___9~3#1); 109#L2955-4true assume !(1 == ~doorState~0); 4422#L2961-4true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 488#L2306-9true assume !(1 == stopRequestedInDirection_~dir#1); 3879#L2475-9true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 3326#L2477-9true assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1332#L2963-4true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 5698#L2682-12true assume !(1 == ~currentHeading~0); 1806#L2692-12true assume !(0 == ~currentFloorID~0); 785#L2698-12true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1923#L2703-12true assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 672#L2985-4true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 3026#L1446-4true assume !(-1 == ~expectedDirection~0); 4109#L1455-4true assume true; 4058#L1459-4true assume !(1 == ~expectedDirection~0); 1832#L1474-4true assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 2839#L2987-4true assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1140#L2102-3true assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 4798#L2154-11true assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 321#L1315-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 3226#L1316-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 2099#L2119-34true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 4101#L2140-34true assume true;__utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 5438#L1320-3true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 1628#L1438-3true assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 2716#L709-88true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 11#L727-88true assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 5436#L2715-3true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 5711#L2727-3true assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 569#L2864-3true assume !(0 != timeShift_~tmp___9~3#1); 5523#L2955-3true assume !(1 == ~doorState~0); 3198#L2961-3true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1308#L2306-7true assume !(1 == stopRequestedInDirection_~dir#1); 3744#L2475-7true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 2825#L2477-7true assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 325#L2963-3true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 1152#L2682-9true assume !(1 == ~currentHeading~0); 2276#L2692-9true assume !(0 == ~currentFloorID~0); 945#L2698-9true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1128#L2703-9true assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 97#L2985-3true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 4777#L1446-3true assume !(-1 == ~expectedDirection~0); 4917#L1455-3true assume true; 1295#L1459-3true assume !(1 == ~expectedDirection~0); 4889#L1474-3true assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 4593#L2987-3true assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1892#L2102-2true assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 4206#L2154-8true assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 196#L1315-2true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 5447#L1316-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 3650#L2119-23true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 845#L2140-23true assume true;__utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 615#L1320-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 2147#L1438-2true assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 4658#L709-67true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 348#L727-67true assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 4669#L2715-2true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 322#L2727-2true assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 5276#L2864-2true assume !(0 != timeShift_~tmp___9~3#1); 2553#L2955-2true assume !(1 == ~doorState~0); 14#L2961-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 3443#L2306-5true assume !(1 == stopRequestedInDirection_~dir#1); 3201#L2475-5true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 356#L2477-5true assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 5528#L2963-2true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 521#L2682-6true assume !(1 == ~currentHeading~0); 4216#L2692-6true assume !(0 == ~currentFloorID~0); 4267#L2698-6true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2789#L2703-6true assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 76#L2985-2true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 5857#L1446-2true assume !(-1 == ~expectedDirection~0); 457#L1455-2true assume true; 2392#L1459-2true assume !(1 == ~expectedDirection~0); 4310#L1474-2true assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1456#L2987-2true assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 2721#L181true assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 2243#L454true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 3635#L479true assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 341#L980true assume 0 == initPersonOnFloor_~floor#1; 3169#L981true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2089#L1122true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 3336#L772true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 5815#L793true assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1988#L1124true assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1823#L113true assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2122#L2102-1true assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 5532#L2154-5true assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 1619#L1315-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 379#L1316-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 110#L2119-12true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 2137#L2140-12true assume true;__utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 1729#L1320-1true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 2902#L1438-1true assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 771#L709-46true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 4643#L727-46true assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 2805#L2715-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1524#L2727-1true assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 415#L2864-1true assume !(0 != timeShift_~tmp___9~3#1); 3648#L2955-1true assume !(1 == ~doorState~0); 4#L2961-1true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 4438#L2306-3true assume !(1 == stopRequestedInDirection_~dir#1); 613#L2475-3true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 597#L2477-3true assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 2112#L2963-1true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 3948#L2682-3true assume !(1 == ~currentHeading~0); 28#L2692-3true assume !(0 == ~currentFloorID~0); 2519#L2698-3true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3714#L2703-3true assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 174#L2985-1true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 3730#L1446-1true assume !(-1 == ~expectedDirection~0); 5710#L1455-1true assume true; 5168#L1459-1true assume !(1 == ~expectedDirection~0); 5507#L1474-1true assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 2133#L2987-1true assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 3062#L198true [2024-11-17 08:39:08,490 INFO L747 eck$LassoCheckResult]: Loop: 3062#L198true assume true; 5340#L198-1true assume !false; 4092#cleanup_while_0_continue#1true assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 715#L202true assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 2795#L1973true assume true;cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 3752#L206true assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 77#L709-25true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 136#L727-25true assume true;anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 5875#L2210true assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 4497#L2260true assume true;isIdle_#t~ret67#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 5311#L2287true assume true;cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1002#L218true assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 114#L2102true assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 5586#L2154-2true assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 1141#L1315true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 5901#L1377true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 3521#L2119-6true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1865#L2140-6true assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 2855#L1381true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 3000#L1438true assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 8#L709-20true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 3938#L727-20true assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 1054#L2715true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1843#L2727true assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 2947#L2864true assume !(0 != timeShift_~tmp___9~3#1); 4221#L2955true assume 1 == ~doorState~0;~doorState~0 := 0; 5941#L2961true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 3271#L2306-1true assume !(1 == stopRequestedInDirection_~dir#1); 3168#L2475-1true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 2138#L2477-1true assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 4870#L2963true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 130#L2682true assume !(1 == ~currentHeading~0); 1687#L2692true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5398#L2698true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3119#L2703true assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 2159#L2985true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 3456#L1446true assume !(-1 == ~expectedDirection~0); 2116#L1455true assume true; 4486#L1459true assume !(1 == ~expectedDirection~0); 5329#L1474true assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 475#L2987true assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 3062#L198true [2024-11-17 08:39:08,501 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:08,504 INFO L85 PathProgramCache]: Analyzing trace with hash 578344989, now seen corresponding path program 1 times [2024-11-17 08:39:08,515 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:08,517 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1857414041] [2024-11-17 08:39:08,517 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:08,518 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:08,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:09,330 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:09,331 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:09,334 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1857414041] [2024-11-17 08:39:09,335 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1857414041] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:09,335 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:09,335 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:09,337 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [733514521] [2024-11-17 08:39:09,340 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:09,346 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:09,346 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:09,347 INFO L85 PathProgramCache]: Analyzing trace with hash -1839491960, now seen corresponding path program 1 times [2024-11-17 08:39:09,347 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:09,348 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2084380626] [2024-11-17 08:39:09,348 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:09,348 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:09,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:09,536 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:09,537 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:09,537 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2084380626] [2024-11-17 08:39:09,538 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2084380626] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:09,538 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:09,538 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-17 08:39:09,539 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [756258880] [2024-11-17 08:39:09,539 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:09,540 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:09,541 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:09,577 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-17 08:39:09,578 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-17 08:39:09,595 INFO L87 Difference]: Start difference. First operand has 5959 states, 5958 states have (on average 1.8472641826116147) internal successors, (11006), 5958 states have internal predecessors, (11006), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 6 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:14,662 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:14,663 INFO L93 Difference]: Finished difference Result 9873 states and 18111 transitions. [2024-11-17 08:39:14,664 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9873 states and 18111 transitions. [2024-11-17 08:39:14,765 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2201 [2024-11-17 08:39:14,829 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9873 states to 9837 states and 18070 transitions. [2024-11-17 08:39:14,831 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9837 [2024-11-17 08:39:14,843 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9837 [2024-11-17 08:39:14,844 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9837 states and 18070 transitions. [2024-11-17 08:39:14,868 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:14,868 INFO L218 hiAutomatonCegarLoop]: Abstraction has 9837 states and 18070 transitions. [2024-11-17 08:39:14,897 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9837 states and 18070 transitions. [2024-11-17 08:39:15,097 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9837 to 9792. [2024-11-17 08:39:15,128 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9792 states, 9792 states have (on average 1.8383374183006536) internal successors, (18001), 9791 states have internal predecessors, (18001), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:15,158 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9792 states to 9792 states and 18001 transitions. [2024-11-17 08:39:15,159 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9792 states and 18001 transitions. [2024-11-17 08:39:15,160 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-11-17 08:39:15,164 INFO L425 stractBuchiCegarLoop]: Abstraction has 9792 states and 18001 transitions. [2024-11-17 08:39:15,165 INFO L332 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2024-11-17 08:39:15,165 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9792 states and 18001 transitions. [2024-11-17 08:39:15,211 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2190 [2024-11-17 08:39:15,211 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:15,211 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:15,217 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:15,218 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:15,219 INFO L745 eck$LassoCheckResult]: Stem: 21169#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 21170#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 20707#L1866 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 20708#L1859 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 16717#L1874 assume true;main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 16718#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 19694#L368 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 17948#L702 assume true;assume { :end_inline_initFloors } true; 17949#L1942 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 18309#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 18310#L479-1 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 18904#L980-1 assume 0 == initPersonOnFloor_~floor#1; 19835#L981-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 16323#L1122-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 21536#L772-1 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 17535#L793-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 20918#L1124-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 21194#L113-1 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 21174#L2102-4 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 16814#L2154-14 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 16815#L1315-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 21854#L1316-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 20869#L2119-45 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 16952#L2140-45 assume true;__utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 15959#L1320-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 15960#L1438-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 17976#L709-109 assume !(0 == isFloorCalling_~floorID#1); 17977#L713-109 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 19575#L727-109 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 16977#L2715-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 16305#L2727-4 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 17471#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 16126#L2955-4 assume !(1 == ~doorState~0); 16127#L2961-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 16982#L2306-9 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 16983#L1283-24 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 21489#L2310-9 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 16578#L2477-9 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 18515#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 18517#L2682-12 assume !(1 == ~currentHeading~0); 19225#L2692-12 assume !(0 == ~currentFloorID~0); 17582#L2698-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 17583#L2703-12 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 16055#L2985-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 23897#L1446-4 assume !(-1 == ~expectedDirection~0); 23895#L1455-4 assume true; 23893#L1459-4 assume !(1 == ~expectedDirection~0); 23891#L1474-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 23890#L2987-4 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 23889#L2102-3 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 23888#L2154-11 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 23886#L1315-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 23887#L1316-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 19620#L2119-34 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 16194#L2140-34 assume true;__utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 21442#L1320-3 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 17548#L1438-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 18962#L709-88 assume !(0 == isFloorCalling_~floorID#1); 20312#L713-88 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 15875#L727-88 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 15876#L2715-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 21503#L2727-3 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 17155#L2864-3 assume !(0 != timeShift_~tmp___9~3#1); 17157#L2955-3 assume !(1 == ~doorState~0); 21960#L2961-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 22325#L2306-7 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 22323#L1283-19 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 22319#L2310-7 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 16647#L2477-7 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 22309#L2963-3 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 18223#L2682-9 assume !(1 == ~currentHeading~0); 18225#L2692-9 assume !(0 == ~currentFloorID~0); 17870#L2698-9 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 17871#L2703-9 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 18185#L2985-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 24929#L1446-3 assume !(-1 == ~expectedDirection~0); 24927#L1455-3 assume true; 24924#L1459-3 assume !(1 == ~expectedDirection~0); 24923#L1474-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 24922#L2987-3 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 24921#L2102-2 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 24920#L2154-8 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 24919#L1315-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 24918#L1316-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 24917#L1323-2 assume true; 24916#L1327-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 24911#L2119-24 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 24909#L2140-24 assume true;__utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 20276#L1331-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 17808#L1438-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 22290#L709-67 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 16673#L727-67 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 16674#L2715-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 16617#L2727-2 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 16618#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 20139#L2955-2 assume !(1 == ~doorState~0); 15883#L2961-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 15884#L2306-5 assume !(1 == stopRequestedInDirection_~dir#1); 20988#L2475-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 16690#L2477-5 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 16691#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 17056#L2682-6 assume !(1 == ~currentHeading~0); 17058#L2692-6 assume !(0 == ~currentFloorID~0); 21494#L2698-6 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 20384#L2703-6 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 18816#L2985-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 24101#L1446-2 assume !(-1 == ~expectedDirection~0); 24099#L1455-2 assume true; 24097#L1459-2 assume !(1 == ~expectedDirection~0); 24095#L1474-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 24094#L2987-2 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 24093#L181 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 24091#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 24086#L479 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 24085#L980 assume 0 == initPersonOnFloor_~floor#1; 24076#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 24053#L1122 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 24048#L772 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 24047#L793 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 24046#L1124 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 24045#L113 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 24044#L2102-1 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 24043#L2154-5 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 24041#L1315-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 24040#L1316-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 16128#L2119-12 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 16130#L2140-12 assume true;__utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 19115#L1320-1 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 18247#L1438-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 17553#L709-46 assume !(0 == isFloorCalling_~floorID#1); 17554#L713-46 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 22419#L727-46 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 20399#L2715-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 18813#L2727-1 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 18814#L2864-1 assume !(0 != timeShift_~tmp___9~3#1); 22403#L2955-1 assume !(1 == ~doorState~0); 22401#L2961-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 22400#L2306-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 21834#L1283-9 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 21835#L2310-3 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 16501#L2477-3 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 22377#L2963-1 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 22376#L2682-3 assume !(1 == ~currentHeading~0); 15919#L2692-3 assume !(0 == ~currentFloorID~0); 15920#L2698-3 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 20108#L2703-3 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 16283#L2985-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 16284#L1446-1 assume !(-1 == ~expectedDirection~0); 22518#L1455-1 assume true; 22517#L1459-1 assume !(1 == ~expectedDirection~0); 22513#L1474-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 22512#L2987-1 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 20647#L198 [2024-11-17 08:39:15,220 INFO L747 eck$LassoCheckResult]: Loop: 20647#L198 assume true; 20648#L198-1 assume !false; 21434#cleanup_while_0_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 17447#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 17448#L1973 assume true;cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 20387#L206 assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 21211#L709-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 16190#L727-25 assume true;anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 16191#L2210 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 22471#L2260 assume true;isIdle_#t~ret67#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 22470#L2287 assume true;cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 17978#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 17979#L2102 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 21970#L2154-2 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 18203#L1315 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 18204#L1316 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 18492#L2119-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 17013#L2140-1 assume true;__utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 19920#L1320 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 16889#L1438 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 15867#L709-20 assume !(0 == isFloorCalling_~floorID#1); 15868#L713-20 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 18659#L727-20 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 18058#L2715 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 18059#L2727 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 19283#L2864 assume !(0 != timeShift_~tmp___9~3#1); 20533#L2955 assume 1 == ~doorState~0;~doorState~0 := 0; 21496#L2961 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 20842#L2306-1 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 17354#L1283-4 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 17355#L2310-1 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 16013#L2477-1 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 19664#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 16176#L2682 assume !(1 == ~currentHeading~0); 16178#L2692 assume !(0 == ~currentFloorID~0); 19058#L2698 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 20700#L2703 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 20701#L2985 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 20997#L1446 assume !(-1 == ~expectedDirection~0); 17337#L1455 assume true; 22515#L1459 assume !(1 == ~expectedDirection~0); 21924#L1474 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 21925#L2987 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 20647#L198 [2024-11-17 08:39:15,223 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:15,223 INFO L85 PathProgramCache]: Analyzing trace with hash -252130584, now seen corresponding path program 1 times [2024-11-17 08:39:15,223 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:15,223 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1462496659] [2024-11-17 08:39:15,223 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:15,223 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:15,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:15,429 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:15,431 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:15,432 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1462496659] [2024-11-17 08:39:15,432 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1462496659] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:15,432 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:15,432 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:15,432 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1655222835] [2024-11-17 08:39:15,433 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:15,433 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:15,435 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:15,435 INFO L85 PathProgramCache]: Analyzing trace with hash -1197977008, now seen corresponding path program 1 times [2024-11-17 08:39:15,435 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:15,435 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [557912775] [2024-11-17 08:39:15,435 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:15,436 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:15,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:15,620 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:15,620 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:15,621 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [557912775] [2024-11-17 08:39:15,621 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [557912775] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:15,621 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:15,621 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-17 08:39:15,622 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [960183934] [2024-11-17 08:39:15,622 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:15,622 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:15,622 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:15,623 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-17 08:39:15,623 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-17 08:39:15,624 INFO L87 Difference]: Start difference. First operand 9792 states and 18001 transitions. cyclomatic complexity: 8210 Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 6 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:19,877 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:19,878 INFO L93 Difference]: Finished difference Result 14009 states and 25527 transitions. [2024-11-17 08:39:19,878 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14009 states and 25527 transitions. [2024-11-17 08:39:19,953 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3295 [2024-11-17 08:39:20,030 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14009 states to 14009 states and 25527 transitions. [2024-11-17 08:39:20,030 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14009 [2024-11-17 08:39:20,046 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14009 [2024-11-17 08:39:20,047 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14009 states and 25527 transitions. [2024-11-17 08:39:20,067 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:20,067 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14009 states and 25527 transitions. [2024-11-17 08:39:20,080 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14009 states and 25527 transitions. [2024-11-17 08:39:20,251 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14009 to 13240. [2024-11-17 08:39:20,276 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13240 states, 13240 states have (on average 1.8348942598187312) internal successors, (24294), 13239 states have internal predecessors, (24294), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:20,305 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13240 states to 13240 states and 24294 transitions. [2024-11-17 08:39:20,305 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13240 states and 24294 transitions. [2024-11-17 08:39:20,306 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-11-17 08:39:20,306 INFO L425 stractBuchiCegarLoop]: Abstraction has 13240 states and 24294 transitions. [2024-11-17 08:39:20,306 INFO L332 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2024-11-17 08:39:20,306 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13240 states and 24294 transitions. [2024-11-17 08:39:20,382 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3103 [2024-11-17 08:39:20,382 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:20,382 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:20,389 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:20,389 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:20,390 INFO L745 eck$LassoCheckResult]: Stem: 44919#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 44920#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 44479#L1866 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 44480#L1859 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 40525#L1874 assume true;main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 40526#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 43468#L368 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 41741#L702 assume true;assume { :end_inline_initFloors } true; 41742#L1942 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 42094#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 42095#L479-1 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 42687#L980-1 assume 0 == initPersonOnFloor_~floor#1; 43609#L981-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 40136#L1122-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 45271#L772-1 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 41329#L793-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 44686#L1124-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 44943#L113-1 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 44923#L2102-4 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 40620#L2154-14 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 40621#L1315-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 45576#L1316-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 44636#L2119-45 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 40754#L2140-45 assume true;__utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 39779#L1320-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 39780#L1438-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 41767#L709-109 assume !(0 == isFloorCalling_~floorID#1); 41768#L713-109 assume !(1 == isFloorCalling_~floorID#1); 45274#L717-109 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 43350#L727-109 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 40779#L2715-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 40119#L2727-4 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 41269#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 39946#L2955-4 assume !(1 == ~doorState~0); 39947#L2961-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 40787#L2306-9 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 40788#L1283-24 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 45228#L2310-9 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 40388#L2477-9 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 42303#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 42305#L2682-12 assume !(1 == ~currentHeading~0); 43006#L2692-12 assume !(0 == ~currentFloorID~0); 41378#L2698-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 41379#L2703-12 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 39873#L2985-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 41164#L1446-4 assume !(-1 == ~expectedDirection~0); 40659#L1455-4 assume true; 45153#L1459-4 assume !(1 == ~expectedDirection~0); 43044#L1474-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 43045#L2987-4 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 44214#L2102-3 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 46299#L2154-11 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 46296#L1315-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 46294#L1316-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 46292#L1323-3 assume true; 46288#L1327-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 43472#L2119-35 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 40065#L2140-35 assume true;__utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 40066#L1331-3 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 46253#L1438-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 46251#L709-88 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 46243#L727-88 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 46240#L2715-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 46236#L2727-3 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 46230#L2864-3 assume !(0 != timeShift_~tmp___9~3#1); 46227#L2955-3 assume !(1 == ~doorState~0); 46200#L2961-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 46192#L2306-7 assume !(1 == stopRequestedInDirection_~dir#1); 46174#L2475-7 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 46169#L2477-7 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 46161#L2963-3 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 46162#L2682-9 assume !(1 == ~currentHeading~0); 46465#L2692-9 assume !(0 == ~currentFloorID~0); 41661#L2698-9 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 41662#L2703-9 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 41975#L2985-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 50613#L1446-3 assume !(-1 == ~expectedDirection~0); 50610#L1455-3 assume true; 50603#L1459-3 assume !(1 == ~expectedDirection~0); 50602#L1474-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 50601#L2987-3 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 50600#L2102-2 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 50599#L2154-8 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 50597#L1315-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 50596#L1316-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 50595#L1323-2 assume true; 50594#L1327-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 45822#L2119-24 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 45805#L2140-24 assume true;__utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 45799#L1331-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 45792#L1438-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 45784#L709-67 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 45780#L727-67 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 45776#L2715-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 45774#L2727-2 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 45772#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 45769#L2955-2 assume !(1 == ~doorState~0); 45753#L2961-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 45736#L2306-5 assume !(1 == stopRequestedInDirection_~dir#1); 45723#L2475-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 45710#L2477-5 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 45708#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 45707#L2682-6 assume !(1 == ~currentHeading~0); 45706#L2692-6 assume !(0 == ~currentFloorID~0); 45232#L2698-6 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 44165#L2703-6 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 42599#L2985-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 50385#L1446-2 assume !(-1 == ~expectedDirection~0); 50383#L1455-2 assume true; 50381#L1459-2 assume !(1 == ~expectedDirection~0); 50379#L1474-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 50378#L2987-2 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 50377#L181 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 50375#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 50370#L479 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 50368#L980 assume 0 == initPersonOnFloor_~floor#1; 49656#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 49631#L1122 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 49620#L772 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 49619#L793 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 49618#L1124 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 49617#L113 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 49616#L2102-1 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 49614#L2154-5 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 49612#L1315-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 49610#L1316-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 49609#L1323-1 assume true; 49607#L1327-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 46093#L2119-13 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 46086#L2140-13 assume true;__utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 46066#L1331-1 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 46063#L1438-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 46053#L709-46 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 46050#L727-46 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 46046#L2715-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 46043#L2727-1 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 46039#L2864-1 assume !(0 != timeShift_~tmp___9~3#1); 46036#L2955-1 assume !(1 == ~doorState~0); 46014#L2961-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 46005#L2306-3 assume !(1 == stopRequestedInDirection_~dir#1); 45986#L2475-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 45976#L2477-3 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 45968#L2963-1 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 45969#L2682-3 assume !(1 == ~currentHeading~0); 46310#L2692-3 assume !(0 == ~currentFloorID~0); 39738#L2698-3 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 43883#L2703-3 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 40094#L2985-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 40095#L1446-1 assume !(-1 == ~expectedDirection~0); 44941#L1455-1 assume true; 45602#L1459-1 assume !(1 == ~expectedDirection~0); 44762#L1474-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 43433#L2987-1 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 40757#L198 [2024-11-17 08:39:20,390 INFO L747 eck$LassoCheckResult]: Loop: 40757#L198 assume true; 44425#L198-1 assume !false; 45173#cleanup_while_0_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 41244#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 41245#L1973 assume true;cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 44167#L206 assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 39863#L709-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 39865#L727-25 assume true;anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 40005#L2210 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 42355#L2260 assume true;isIdle_#t~ret67#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 45351#L2287 assume true;cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 41769#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 39954#L2102 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 39955#L2154-2 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 41993#L1315 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 41994#L1316 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 46515#L1323 assume true; 46506#L1327 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 40071#L2119-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 45383#L2140-2 assume true;__utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 45384#L1331 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 46392#L1438 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 46384#L709-20 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 46380#L727-20 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 46376#L2715 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 46374#L2727 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 46372#L2864 assume !(0 != timeShift_~tmp___9~3#1); 46366#L2955 assume 1 == ~doorState~0;~doorState~0 := 0; 46355#L2961 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 46337#L2306-1 assume !(1 == stopRequestedInDirection_~dir#1); 46324#L2475-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 46315#L2477-1 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 46313#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 46312#L2682 assume !(1 == ~currentHeading~0); 46311#L2692 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 42841#L2698 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 44471#L2703 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 43464#L2985 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 43465#L1446 assume !(-1 == ~expectedDirection~0); 41135#L1455 assume true; 43416#L1459 assume !(1 == ~expectedDirection~0); 45348#L1474 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 40756#L2987 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 40757#L198 [2024-11-17 08:39:20,392 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:20,392 INFO L85 PathProgramCache]: Analyzing trace with hash 342578296, now seen corresponding path program 1 times [2024-11-17 08:39:20,392 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:20,393 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1851531548] [2024-11-17 08:39:20,393 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:20,396 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:20,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:20,611 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:20,614 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:20,614 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1851531548] [2024-11-17 08:39:20,614 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1851531548] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:20,614 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:20,614 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:20,614 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [834139002] [2024-11-17 08:39:20,615 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:20,615 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:20,615 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:20,615 INFO L85 PathProgramCache]: Analyzing trace with hash 1051012902, now seen corresponding path program 1 times [2024-11-17 08:39:20,615 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:20,616 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [504645895] [2024-11-17 08:39:20,616 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:20,616 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:20,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:20,758 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:20,762 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:20,762 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [504645895] [2024-11-17 08:39:20,763 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [504645895] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:20,763 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:20,763 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-17 08:39:20,763 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [329493111] [2024-11-17 08:39:20,763 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:20,763 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:20,764 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:20,764 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-17 08:39:20,764 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-17 08:39:20,764 INFO L87 Difference]: Start difference. First operand 13240 states and 24294 transitions. cyclomatic complexity: 11055 Second operand has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:21,502 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:21,502 INFO L93 Difference]: Finished difference Result 13240 states and 24226 transitions. [2024-11-17 08:39:21,503 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13240 states and 24226 transitions. [2024-11-17 08:39:21,577 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3103 [2024-11-17 08:39:21,660 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13240 states to 13240 states and 24226 transitions. [2024-11-17 08:39:21,660 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13240 [2024-11-17 08:39:21,680 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13240 [2024-11-17 08:39:21,680 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13240 states and 24226 transitions. [2024-11-17 08:39:21,702 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:21,702 INFO L218 hiAutomatonCegarLoop]: Abstraction has 13240 states and 24226 transitions. [2024-11-17 08:39:21,720 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13240 states and 24226 transitions. [2024-11-17 08:39:21,920 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13240 to 13240. [2024-11-17 08:39:21,942 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13240 states, 13240 states have (on average 1.8297583081570996) internal successors, (24226), 13239 states have internal predecessors, (24226), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:21,975 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13240 states to 13240 states and 24226 transitions. [2024-11-17 08:39:21,976 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13240 states and 24226 transitions. [2024-11-17 08:39:21,978 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-17 08:39:21,979 INFO L425 stractBuchiCegarLoop]: Abstraction has 13240 states and 24226 transitions. [2024-11-17 08:39:21,979 INFO L332 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2024-11-17 08:39:21,979 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13240 states and 24226 transitions. [2024-11-17 08:39:22,039 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3103 [2024-11-17 08:39:22,040 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:22,040 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:22,044 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:22,044 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:22,045 INFO L745 eck$LassoCheckResult]: Stem: 71448#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 71449#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 70999#L1866 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 71000#L1859 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 67016#L1874 assume true;main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 67017#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 69977#L368 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 68233#L702 assume true;assume { :end_inline_initFloors } true; 68234#L1942 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 68588#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 68589#L479-1 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 69184#L980-1 assume 0 == initPersonOnFloor_~floor#1; 70118#L981-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 66624#L1122-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 71812#L772-1 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 67821#L793-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 71215#L1124-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 71472#L113-1 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 71452#L2102-4 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 67111#L2154-14 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 67112#L1315-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 72118#L1316-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 71167#L2119-45 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 67247#L2140-45 assume true;__utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 66264#L1320-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 66265#L1438-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 68261#L709-109 assume !(0 == isFloorCalling_~floorID#1); 68262#L713-109 assume !(1 == isFloorCalling_~floorID#1); 71815#L717-109 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 69858#L727-109 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 67272#L2715-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 66607#L2727-4 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 67759#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 66431#L2955-4 assume !(1 == ~doorState~0); 66432#L2961-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 67277#L2306-9 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 67278#L1283-24 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 71769#L2310-9 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 66876#L2477-9 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 68796#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 68798#L2682-12 assume !(1 == ~currentHeading~0); 69507#L2692-12 assume !(0 == ~currentFloorID~0); 67867#L2698-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 67868#L2703-12 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 66360#L2985-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 72949#L1446-4 assume !(-1 == ~expectedDirection~0); 72947#L1455-4 assume true; 72941#L1459-4 assume !(1 == ~expectedDirection~0); 72938#L1474-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 72937#L2987-4 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 72936#L2102-3 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 72934#L2154-11 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 72932#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 66261#L1377-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 66263#L2119-39 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 67732#L2140-39 assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 67733#L1381-3 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 74844#L1438-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 74836#L709-88 assume !(0 == isFloorCalling_~floorID#1); 74835#L713-88 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 74827#L727-88 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 74823#L2715-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 72236#L2727-3 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 67450#L2864-3 assume !(0 != timeShift_~tmp___9~3#1); 67451#L2955-3 assume !(1 == ~doorState~0); 71062#L2961-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 68759#L2306-7 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 68760#L1283-19 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 69429#L2310-7 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 66853#L2477-7 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 66922#L2963-3 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 66923#L2682-9 assume !(1 == ~currentHeading~0); 68509#L2692-9 assume !(0 == ~currentFloorID~0); 68153#L2698-9 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 68154#L2703-9 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 68469#L2985-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 73235#L1446-3 assume !(-1 == ~expectedDirection~0); 73233#L1455-3 assume true; 73230#L1459-3 assume !(1 == ~expectedDirection~0); 73226#L1474-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 73224#L2987-3 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 73222#L2102-2 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 73220#L2154-8 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 73217#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 72381#L1377-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 69844#L2119-28 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 67503#L2140-28 assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 68042#L1381-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 68092#L1438-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 71957#L709-67 assume !(0 == isFloorCalling_~floorID#1); 71958#L713-67 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 66971#L727-67 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 66972#L2715-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 66916#L2727-2 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 66917#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 70430#L2955-2 assume !(1 == ~doorState~0); 66190#L2961-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 66191#L2306-5 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 69486#L1283-14 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 69167#L2310-5 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 66988#L2477-5 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 66989#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 67350#L2682-6 assume !(1 == ~currentHeading~0); 67352#L2692-6 assume !(0 == ~currentFloorID~0); 71773#L2698-6 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 70679#L2703-6 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 69096#L2985-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 74584#L1446-2 assume !(-1 == ~expectedDirection~0); 74582#L1455-2 assume true; 74580#L1459-2 assume !(1 == ~expectedDirection~0); 74578#L1474-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 74577#L2987-2 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 74576#L181 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 74574#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 74569#L479 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 74568#L980 assume 0 == initPersonOnFloor_~floor#1; 74557#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 74532#L1122 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 74527#L772 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 74526#L793 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 74493#L1124 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 74487#L113 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 74485#L2102-1 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 72962#L2154-5 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 72960#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 72504#L1377-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 67994#L2119-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 68034#L2140-17 assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 68527#L1381-1 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 68193#L1438-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 67839#L709-46 assume !(0 == isFloorCalling_~floorID#1); 67840#L713-46 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 70214#L727-46 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 70695#L2715-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 69094#L2727-1 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 67122#L2864-1 assume !(0 != timeShift_~tmp___9~3#1); 67124#L2955-1 assume !(1 == ~doorState~0); 66164#L2961-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 66165#L2306-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 71866#L1283-9 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 70977#L2310-3 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 66800#L2477-3 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 67501#L2963-1 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 69919#L2682-3 assume !(1 == ~currentHeading~0); 66225#L2692-3 assume !(0 == ~currentFloorID~0); 66226#L2698-3 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 70400#L2703-3 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 66585#L2985-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 66586#L1446-1 assume !(-1 == ~expectedDirection~0); 71471#L1455-1 assume true; 72235#L1459-1 assume !(1 == ~expectedDirection~0); 76092#L1474-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 76091#L2987-1 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 76089#L198 [2024-11-17 08:39:22,048 INFO L747 eck$LassoCheckResult]: Loop: 76089#L198 assume true; 76087#L198-1 assume !false; 76086#cleanup_while_0_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 76085#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 76084#L1973 assume true;cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 76083#L206 assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 76080#L709-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 76074#L727-25 assume true;anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 76051#L2210 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 76048#L2260 assume true;isIdle_#t~ret67#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 76047#L2287 assume true;cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 76046#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 76044#L2102 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 76041#L2154-2 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 76038#L1315 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 76040#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 71333#L2119-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 69705#L2140-6 assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 70748#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 67218#L1438 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 66174#L709-20 assume !(0 == isFloorCalling_~floorID#1); 66175#L713-20 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 68939#L727-20 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 68345#L2715 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 68346#L2727 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 69565#L2864 assume !(0 != timeShift_~tmp___9~3#1); 72830#L2955 assume 1 == ~doorState~0;~doorState~0 := 0; 72828#L2961 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 72814#L2306-1 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 72802#L1283-4 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 72791#L2310-1 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 66318#L2477-1 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 72785#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 72701#L2682 assume !(1 == ~currentHeading~0); 69338#L2692 assume !(0 == ~currentFloorID~0); 69339#L2698 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 70992#L2703 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 70993#L2985 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 76101#L1446 assume !(-1 == ~expectedDirection~0); 76099#L1455 assume true; 76097#L1459 assume !(1 == ~expectedDirection~0); 76093#L1474 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 76090#L2987 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 76089#L198 [2024-11-17 08:39:22,049 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:22,049 INFO L85 PathProgramCache]: Analyzing trace with hash -758729340, now seen corresponding path program 1 times [2024-11-17 08:39:22,049 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:22,050 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1589851469] [2024-11-17 08:39:22,050 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:22,051 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:22,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:22,227 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:22,228 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:22,228 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1589851469] [2024-11-17 08:39:22,229 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1589851469] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:22,229 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:22,230 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:22,230 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1328472468] [2024-11-17 08:39:22,230 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:22,231 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:22,231 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:22,231 INFO L85 PathProgramCache]: Analyzing trace with hash -2031501935, now seen corresponding path program 1 times [2024-11-17 08:39:22,231 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:22,231 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1200798927] [2024-11-17 08:39:22,232 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:22,232 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:22,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:22,290 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:22,291 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:22,291 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1200798927] [2024-11-17 08:39:22,291 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1200798927] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:22,291 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:22,291 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-17 08:39:22,292 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1287125662] [2024-11-17 08:39:22,292 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:22,293 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:22,293 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:22,293 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-17 08:39:22,293 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-17 08:39:22,294 INFO L87 Difference]: Start difference. First operand 13240 states and 24226 transitions. cyclomatic complexity: 10987 Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:24,053 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:24,053 INFO L93 Difference]: Finished difference Result 13266 states and 24252 transitions. [2024-11-17 08:39:24,053 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13266 states and 24252 transitions. [2024-11-17 08:39:24,106 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3109 [2024-11-17 08:39:24,159 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13266 states to 13266 states and 24252 transitions. [2024-11-17 08:39:24,159 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13266 [2024-11-17 08:39:24,186 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13266 [2024-11-17 08:39:24,187 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13266 states and 24252 transitions. [2024-11-17 08:39:24,202 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:24,202 INFO L218 hiAutomatonCegarLoop]: Abstraction has 13266 states and 24252 transitions. [2024-11-17 08:39:24,215 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13266 states and 24252 transitions. [2024-11-17 08:39:24,359 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13266 to 13266. [2024-11-17 08:39:24,380 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13266 states, 13266 states have (on average 1.828132066938037) internal successors, (24252), 13265 states have internal predecessors, (24252), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:24,409 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13266 states to 13266 states and 24252 transitions. [2024-11-17 08:39:24,409 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13266 states and 24252 transitions. [2024-11-17 08:39:24,410 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-17 08:39:24,411 INFO L425 stractBuchiCegarLoop]: Abstraction has 13266 states and 24252 transitions. [2024-11-17 08:39:24,412 INFO L332 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2024-11-17 08:39:24,412 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13266 states and 24252 transitions. [2024-11-17 08:39:24,455 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3109 [2024-11-17 08:39:24,455 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:24,456 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:24,458 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:24,459 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:24,460 INFO L745 eck$LassoCheckResult]: Stem: 97949#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 97950#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 97506#L1866 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 97507#L1859 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 93533#L1874 assume true;main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 93534#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 96481#L368 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 94745#L702 assume true;assume { :end_inline_initFloors } true; 94746#L1942 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 95099#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 95100#L479-1 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 95690#L980-1 assume 0 == initPersonOnFloor_~floor#1; 96625#L981-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 93141#L1122-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 98313#L772-1 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 94334#L793-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 97717#L1124-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 97974#L113-1 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 97953#L2102-4 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 93628#L2154-14 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 93629#L1315-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 98629#L1316-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 97668#L2119-45 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 93761#L2140-45 assume true;__utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 92780#L1320-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 92781#L1438-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 94773#L709-109 assume !(0 == isFloorCalling_~floorID#1); 94774#L713-109 assume !(1 == isFloorCalling_~floorID#1); 98318#L717-109 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 96360#L727-109 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 93786#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 93787#L2119-44 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 94168#L2140-44 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 93122#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 93124#L2727-4 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 99263#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 92947#L2955-4 assume !(1 == ~doorState~0); 92948#L2961-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 93791#L2306-9 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 93792#L1283-24 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 98268#L2310-9 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 93393#L2477-9 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 95305#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 95307#L2682-12 assume !(1 == ~currentHeading~0); 96013#L2692-12 assume !(0 == ~currentFloorID~0); 94380#L2698-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 94381#L2703-12 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 92876#L2985-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 94169#L1446-4 assume !(-1 == ~expectedDirection~0); 93666#L1455-4 assume true; 98194#L1459-4 assume !(1 == ~expectedDirection~0); 96051#L1474-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 96052#L2987-4 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 94995#L2102-3 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 94996#L2154-11 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 93431#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 93433#L1377-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 96799#L2119-39 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 94245#L2140-39 assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 94246#L1381-3 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 94347#L1438-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 95750#L709-88 assume !(0 == isFloorCalling_~floorID#1); 97117#L713-88 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 92698#L727-88 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 92699#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 95634#L2119-33 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 94867#L2140-33 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 98282#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 98284#L2727-3 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 99240#L2864-3 assume !(0 != timeShift_~tmp___9~3#1); 99237#L2955-3 assume !(1 == ~doorState~0); 99210#L2961-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 99206#L2306-7 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 99204#L1283-19 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 99202#L2310-7 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 93464#L2477-7 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 99181#L2963-3 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 95018#L2682-9 assume !(1 == ~currentHeading~0); 95020#L2692-9 assume !(0 == ~currentFloorID~0); 94666#L2698-9 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 94667#L2703-9 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 92918#L2985-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 92919#L1446-3 assume !(-1 == ~expectedDirection~0); 97135#L1455-3 assume true; 95246#L1459-3 assume !(1 == ~expectedDirection~0); 95247#L1474-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 98439#L2987-3 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 98440#L2102-2 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 98264#L2154-8 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 98265#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 98888#L1377-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 96346#L2119-28 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 94016#L2140-28 assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 94557#L1381-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 94605#L1438-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 96460#L709-67 assume !(0 == isFloorCalling_~floorID#1); 98467#L713-67 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 99420#L727-67 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 103561#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 103562#L2119-22 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 105330#L2140-22 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 103563#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 103564#L2727-2 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 103559#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 96941#L2955-2 assume !(1 == ~doorState~0); 92706#L2961-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 92707#L2306-5 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 95992#L1283-14 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 95673#L2310-5 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 93506#L2477-5 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 93507#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 93864#L2682-6 assume !(1 == ~currentHeading~0); 93866#L2692-6 assume !(0 == ~currentFloorID~0); 98272#L2698-6 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 97189#L2703-6 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 95602#L2985-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 100208#L1446-2 assume !(-1 == ~expectedDirection~0); 100206#L1455-2 assume true; 100204#L1459-2 assume !(1 == ~expectedDirection~0); 100202#L1474-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 100200#L2987-2 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 100199#L181 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 99701#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 99691#L479 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 99689#L980 assume 0 == initPersonOnFloor_~floor#1; 99565#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 99540#L1122 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 99535#L772 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 99534#L793 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 99533#L1124 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 99532#L113 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 99526#L2102-1 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 99524#L2154-5 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 99521#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 99513#L1377-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 99500#L2119-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 99499#L2140-17 assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 95038#L1381-1 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 94705#L1438-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 94352#L709-46 assume !(0 == isFloorCalling_~floorID#1); 94353#L713-46 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 99421#L727-46 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 104170#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 104171#L2119-11 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 104174#L2140-11 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 104172#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 104173#L2727-1 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 104162#L2864-1 assume !(0 != timeShift_~tmp___9~3#1); 97918#L2955-1 assume !(1 == ~doorState~0); 92680#L2961-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 92681#L2306-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 98375#L1283-9 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 97481#L2310-3 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 93317#L2477-3 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 94014#L2963-1 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 96422#L2682-3 assume !(1 == ~currentHeading~0); 92741#L2692-3 assume !(0 == ~currentFloorID~0); 92742#L2698-3 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 96910#L2703-3 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 93427#L2985-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 104433#L1446-1 assume !(-1 == ~expectedDirection~0); 104431#L1455-1 assume true; 104428#L1459-1 assume !(1 == ~expectedDirection~0); 104427#L1474-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 104426#L2987-1 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 104424#L198 [2024-11-17 08:39:24,461 INFO L747 eck$LassoCheckResult]: Loop: 104424#L198 assume true; 104423#L198-1 assume !false; 104422#cleanup_while_0_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 104421#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 104420#L1973 assume true;cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 104419#L206 assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 104416#L709-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 104410#L727-25 assume true;anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 103659#L2210 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 103656#L2260 assume true;isIdle_#t~ret67#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 103654#L2287 assume true;cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 103652#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 103650#L2102 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 103648#L2154-2 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 103644#L1315 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 103643#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 103638#L2119-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 103636#L2140-6 assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 103619#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 103618#L1438 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 103617#L709-20 assume !(0 == isFloorCalling_~floorID#1); 103614#L713-20 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 103616#L727-20 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 105228#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 105229#L2119 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 105227#L2140 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 105225#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 105224#L2727 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 105223#L2864 assume !(0 != timeShift_~tmp___9~3#1); 98274#L2955 assume 1 == ~doorState~0;~doorState~0 := 0; 98275#L2961 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 97640#L2306-1 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 94158#L1283-4 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 94159#L2310-1 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 92834#L2477-1 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 96450#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 92997#L2682 assume !(1 == ~currentHeading~0); 92999#L2692 assume !(0 == ~currentFloorID~0); 95846#L2698 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 97499#L2703 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 97500#L2985 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 104441#L1446 assume !(-1 == ~expectedDirection~0); 104439#L1455 assume true; 104437#L1459 assume !(1 == ~expectedDirection~0); 104435#L1474 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 104425#L2987 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 104424#L198 [2024-11-17 08:39:24,461 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:24,462 INFO L85 PathProgramCache]: Analyzing trace with hash -1765924173, now seen corresponding path program 1 times [2024-11-17 08:39:24,462 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:24,462 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2082411997] [2024-11-17 08:39:24,462 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:24,462 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:24,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:24,625 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:24,625 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:24,626 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2082411997] [2024-11-17 08:39:24,626 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2082411997] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:24,626 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:24,626 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:24,626 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2007726637] [2024-11-17 08:39:24,626 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:24,627 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:24,628 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:24,628 INFO L85 PathProgramCache]: Analyzing trace with hash 2021557046, now seen corresponding path program 1 times [2024-11-17 08:39:24,628 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:24,628 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1258431095] [2024-11-17 08:39:24,628 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:24,628 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:24,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:24,680 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:24,681 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:24,681 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1258431095] [2024-11-17 08:39:24,681 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1258431095] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:24,681 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:24,681 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-17 08:39:24,681 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [355794944] [2024-11-17 08:39:24,681 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:24,682 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:24,682 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:24,682 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-17 08:39:24,682 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-17 08:39:24,682 INFO L87 Difference]: Start difference. First operand 13266 states and 24252 transitions. cyclomatic complexity: 10987 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:28,209 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:28,209 INFO L93 Difference]: Finished difference Result 17579 states and 32067 transitions. [2024-11-17 08:39:28,209 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17579 states and 32067 transitions. [2024-11-17 08:39:28,273 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4237 [2024-11-17 08:39:28,342 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17579 states to 17579 states and 32067 transitions. [2024-11-17 08:39:28,342 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17579 [2024-11-17 08:39:28,366 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17579 [2024-11-17 08:39:28,366 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17579 states and 32067 transitions. [2024-11-17 08:39:28,386 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:28,387 INFO L218 hiAutomatonCegarLoop]: Abstraction has 17579 states and 32067 transitions. [2024-11-17 08:39:28,403 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17579 states and 32067 transitions. [2024-11-17 08:39:28,586 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17579 to 13250. [2024-11-17 08:39:28,606 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13250 states, 13250 states have (on average 1.8275471698113208) internal successors, (24215), 13249 states have internal predecessors, (24215), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:28,636 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13250 states to 13250 states and 24215 transitions. [2024-11-17 08:39:28,636 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13250 states and 24215 transitions. [2024-11-17 08:39:28,637 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-17 08:39:28,639 INFO L425 stractBuchiCegarLoop]: Abstraction has 13250 states and 24215 transitions. [2024-11-17 08:39:28,640 INFO L332 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2024-11-17 08:39:28,640 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13250 states and 24215 transitions. [2024-11-17 08:39:28,687 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3105 [2024-11-17 08:39:28,687 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:28,687 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:28,690 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:28,691 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:28,691 INFO L745 eck$LassoCheckResult]: Stem: 128734#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 128735#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 128307#L1866 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 128308#L1859 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 124390#L1874 assume true;main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 124391#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 127311#L368 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 125595#L702 assume true;assume { :end_inline_initFloors } true; 125596#L1942 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 125948#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 125949#L479-1 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 126536#L980-1 assume 0 == initPersonOnFloor_~floor#1; 127450#L981-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 124000#L1122-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 129079#L772-1 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 125190#L793-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 128510#L1124-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 128757#L113-1 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 128738#L2102-4 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 124485#L2154-14 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 124486#L1315-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 129366#L1316-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 128463#L2119-45 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 124618#L2140-45 assume true;__utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 123639#L1320-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 123640#L1438-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 125623#L709-109 assume !(0 == isFloorCalling_~floorID#1); 125624#L713-109 assume !(1 == isFloorCalling_~floorID#1); 129082#L717-109 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 127195#L727-109 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 124643#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 124644#L2119-44 assume !(0 == buttonForFloorIsPressed_~floorID#1); 125978#L2123-44 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 125024#L2140-44 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 123981#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 123983#L2727-4 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 129476#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 123806#L2955-4 assume !(1 == ~doorState~0); 123807#L2961-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 124648#L2306-9 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 124649#L1283-24 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 129035#L2310-9 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 124252#L2477-9 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 126153#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 126155#L2682-12 assume !(1 == ~currentHeading~0); 126851#L2692-12 assume !(0 == ~currentFloorID~0); 125236#L2698-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 125237#L2703-12 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 123735#L2985-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 125025#L1446-4 assume !(-1 == ~expectedDirection~0); 124523#L1455-4 assume true; 128964#L1459-4 assume !(1 == ~expectedDirection~0); 126892#L1474-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 126893#L2987-4 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 128047#L2102-3 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 130088#L2154-11 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 130085#L1315-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 130083#L1316-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 130081#L1323-3 assume true; 130076#L1327-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 130072#L2119-35 assume !(0 == buttonForFloorIsPressed_~floorID#1); 130059#L2123-35 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 130048#L2140-35 assume true;__utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 130041#L1331-3 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 130038#L1438-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 130036#L709-88 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 130034#L727-88 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 130031#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 130016#L2119-33 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 130013#L2140-33 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 130009#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 130008#L2727-3 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 129989#L2864-3 assume !(0 != timeShift_~tmp___9~3#1); 129981#L2955-3 assume !(1 == ~doorState~0); 129980#L2961-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 129979#L2306-7 assume !(1 == stopRequestedInDirection_~dir#1); 129960#L2475-7 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 129954#L2477-7 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 129951#L2963-3 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 129952#L2682-9 assume !(1 == ~currentHeading~0); 130308#L2692-9 assume !(0 == ~currentFloorID~0); 125517#L2698-9 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 125518#L2703-9 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 125830#L2985-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 130407#L1446-3 assume !(-1 == ~expectedDirection~0); 130371#L1455-3 assume true; 130372#L1459-3 assume !(1 == ~expectedDirection~0); 134374#L1474-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 134373#L2987-3 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 130320#L2102-2 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 130321#L2154-8 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 129606#L1315-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 129607#L1316-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 130322#L1323-2 assume true; 130323#L1327-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 129596#L2119-24 assume !(0 == buttonForFloorIsPressed_~floorID#1); 129588#L2123-24 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 129574#L2140-24 assume true;__utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 129568#L1331-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 129561#L1438-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 129560#L709-67 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 129559#L727-67 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 129558#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 129553#L2119-22 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 129552#L2140-22 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 129550#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 129548#L2727-2 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 129544#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 129540#L2955-2 assume !(1 == ~doorState~0); 129528#L2961-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 129507#L2306-5 assume !(1 == stopRequestedInDirection_~dir#1); 129494#L2475-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 129481#L2477-5 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 129479#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 129478#L2682-6 assume !(1 == ~currentHeading~0); 129477#L2692-6 assume !(0 == ~currentFloorID~0); 129039#L2698-6 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 127997#L2703-6 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 126448#L2985-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 132674#L1446-2 assume !(-1 == ~expectedDirection~0); 132666#L1455-2 assume true; 132667#L1459-2 assume !(1 == ~expectedDirection~0); 133569#L1474-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 133568#L2987-2 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 133567#L181 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 133565#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 133560#L479 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 133559#L980 assume 0 == initPersonOnFloor_~floor#1; 133550#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 133529#L1122 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 130384#L772 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 130386#L793 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 130352#L1124 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 130353#L113 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 129882#L2102-1 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 129883#L2154-5 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 129877#L1315-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 129878#L1316-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 130318#L1323-1 assume true; 130319#L1327-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 129866#L2119-13 assume !(0 == buttonForFloorIsPressed_~floorID#1); 129850#L2123-13 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 129842#L2140-13 assume true;__utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 129835#L1331-1 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 129832#L1438-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 129831#L709-46 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 129830#L727-46 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 129829#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 129826#L2119-11 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 129821#L2140-11 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 129815#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 129809#L2727-1 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 129800#L2864-1 assume !(0 != timeShift_~tmp___9~3#1); 129796#L2955-1 assume !(1 == ~doorState~0); 129787#L2961-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 129779#L2306-3 assume !(1 == stopRequestedInDirection_~dir#1); 129744#L2475-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 129734#L2477-3 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 129731#L2963-1 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 129732#L2682-3 assume !(1 == ~currentHeading~0); 130098#L2692-3 assume !(0 == ~currentFloorID~0); 123601#L2698-3 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 127723#L2703-3 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 124286#L2985-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 131926#L1446-1 assume !(-1 == ~expectedDirection~0); 131921#L1455-1 assume true; 131915#L1459-1 assume !(1 == ~expectedDirection~0); 131909#L1474-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 131177#L2987-1 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 131143#L198 [2024-11-17 08:39:28,692 INFO L747 eck$LassoCheckResult]: Loop: 131143#L198 assume true; 131139#L198-1 assume !false; 131138#cleanup_while_0_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 131136#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 131135#L1973 assume true;cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 131133#L206 assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 130376#L709-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 130374#L727-25 assume true;anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 130340#L2210 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 130338#L2260 assume true;isIdle_#t~ret67#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 130326#L2287 assume true;cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 130327#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 130312#L2102 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 130313#L2154-2 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 130228#L1315 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 130229#L1316 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 130316#L1323 assume true; 130317#L1327 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 130216#L2119-2 assume !(0 == buttonForFloorIsPressed_~floorID#1); 130210#L2123-2 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 130196#L2140-2 assume true;__utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 130190#L1331 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 130183#L1438 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 130182#L709-20 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 130181#L727-20 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 130180#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 130179#L2119 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 130173#L2140 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 130170#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 130167#L2727 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 130164#L2864 assume !(0 != timeShift_~tmp___9~3#1); 130160#L2955 assume 1 == ~doorState~0;~doorState~0 := 0; 130147#L2961 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 130128#L2306-1 assume !(1 == stopRequestedInDirection_~dir#1); 130114#L2475-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 130103#L2477-1 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 130101#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 130100#L2682 assume !(1 == ~currentHeading~0); 130099#L2692 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 126687#L2698 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 128300#L2703 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 128301#L2985 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 131184#L1446 assume !(-1 == ~expectedDirection~0); 131182#L1455 assume true; 131180#L1459 assume !(1 == ~expectedDirection~0); 131178#L1474 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 131176#L2987 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 131143#L198 [2024-11-17 08:39:28,693 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:28,693 INFO L85 PathProgramCache]: Analyzing trace with hash -1008042873, now seen corresponding path program 1 times [2024-11-17 08:39:28,693 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:28,693 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1098237082] [2024-11-17 08:39:28,694 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:28,694 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:28,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:28,853 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:28,854 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:28,854 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1098237082] [2024-11-17 08:39:28,856 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1098237082] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:28,856 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:28,856 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:28,856 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [621670609] [2024-11-17 08:39:28,856 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:28,857 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:28,857 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:28,857 INFO L85 PathProgramCache]: Analyzing trace with hash 1590510314, now seen corresponding path program 1 times [2024-11-17 08:39:28,857 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:28,858 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1338247943] [2024-11-17 08:39:28,858 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:28,858 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:28,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:28,949 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:28,949 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:28,949 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1338247943] [2024-11-17 08:39:28,950 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1338247943] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:28,950 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:28,950 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-17 08:39:28,950 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1848216605] [2024-11-17 08:39:28,950 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:28,950 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:28,950 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:28,951 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-17 08:39:28,951 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-17 08:39:28,951 INFO L87 Difference]: Start difference. First operand 13250 states and 24215 transitions. cyclomatic complexity: 10966 Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 7 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:30,399 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:30,399 INFO L93 Difference]: Finished difference Result 25895 states and 47371 transitions. [2024-11-17 08:39:30,399 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 25895 states and 47371 transitions. [2024-11-17 08:39:30,500 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6083 [2024-11-17 08:39:30,595 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 25895 states to 25895 states and 47371 transitions. [2024-11-17 08:39:30,596 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 25895 [2024-11-17 08:39:30,622 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 25895 [2024-11-17 08:39:30,622 INFO L73 IsDeterministic]: Start isDeterministic. Operand 25895 states and 47371 transitions. [2024-11-17 08:39:30,658 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:30,658 INFO L218 hiAutomatonCegarLoop]: Abstraction has 25895 states and 47371 transitions. [2024-11-17 08:39:30,680 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25895 states and 47371 transitions. [2024-11-17 08:39:30,929 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25895 to 25855. [2024-11-17 08:39:30,961 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25855 states, 25855 states have (on average 1.8306323728485787) internal successors, (47331), 25854 states have internal predecessors, (47331), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:31,309 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25855 states to 25855 states and 47331 transitions. [2024-11-17 08:39:31,309 INFO L240 hiAutomatonCegarLoop]: Abstraction has 25855 states and 47331 transitions. [2024-11-17 08:39:31,311 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-17 08:39:31,312 INFO L425 stractBuchiCegarLoop]: Abstraction has 25855 states and 47331 transitions. [2024-11-17 08:39:31,312 INFO L332 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2024-11-17 08:39:31,312 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 25855 states and 47331 transitions. [2024-11-17 08:39:31,415 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6075 [2024-11-17 08:39:31,415 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:31,415 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:31,418 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:31,418 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:31,419 INFO L745 eck$LassoCheckResult]: Stem: 168076#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 168077#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 167601#L1866 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 167602#L1859 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 163554#L1874 assume true;main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 163555#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 166536#L368 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 164774#L702 assume true;assume { :end_inline_initFloors } true; 164775#L1942 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 165135#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 165136#L479-1 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 165740#L980-1 assume 0 == initPersonOnFloor_~floor#1; 166684#L981-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 163164#L1122-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 168483#L772-1 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 168484#L793-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 169998#L1124-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 169997#L113-1 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 169996#L2102-4 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 169995#L2154-14 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 169992#L1315-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 169990#L1316-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 169991#L2119-45 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 170006#L2140-45 assume true;__utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 169962#L1320-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 169947#L1438-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 169946#L709-109 assume !(0 == isFloorCalling_~floorID#1); 169945#L713-109 assume !(1 == isFloorCalling_~floorID#1); 169943#L717-109 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 169941#L727-109 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 169940#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 169939#L2119-44 assume !(0 == buttonForFloorIsPressed_~floorID#1); 169935#L2123-44 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 169934#L2140-44 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 169932#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 169931#L2727-4 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 169929#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 169928#L2955-4 assume !(1 == ~doorState~0); 169927#L2961-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 169925#L2306-9 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 169926#L1283-24 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 168424#L2310-9 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 163416#L2477-9 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 165344#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 165346#L2682-12 assume !(1 == ~currentHeading~0); 166061#L2692-12 assume !(0 == ~currentFloorID~0); 164408#L2698-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 164409#L2703-12 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 162898#L2985-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 172941#L1446-4 assume !(-1 == ~expectedDirection~0); 172939#L1455-4 assume true; 172937#L1459-4 assume !(1 == ~expectedDirection~0); 172935#L1474-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 172933#L2987-4 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 172931#L2102-3 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 172930#L2154-11 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 172928#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 172929#L1377-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 172945#L2119-39 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 172943#L2140-39 assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 172899#L1381-3 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 172896#L1438-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 172895#L709-88 assume !(0 == isFloorCalling_~floorID#1); 172894#L713-88 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 172890#L727-88 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 172889#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 172888#L2119-33 assume !(0 == buttonForFloorIsPressed_~floorID#1); 172885#L2123-33 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 172883#L2140-33 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 172881#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 172880#L2727-3 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 172874#L2864-3 assume !(0 != timeShift_~tmp___9~3#1); 172507#L2955-3 assume !(1 == ~doorState~0); 172506#L2961-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 172505#L2306-7 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 166857#L1283-19 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 165985#L2310-7 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 163393#L2477-7 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 163462#L2963-3 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 163463#L2682-9 assume !(1 == ~currentHeading~0); 165056#L2692-9 assume !(0 == ~currentFloorID~0); 164692#L2698-9 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 164693#L2703-9 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 172241#L2985-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 172230#L1446-3 assume !(-1 == ~expectedDirection~0); 172150#L1455-3 assume true; 172151#L1459-3 assume !(1 == ~expectedDirection~0); 172139#L1474-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 172140#L2987-3 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 172128#L2102-2 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 172129#L2154-8 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 172108#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 172110#L1377-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 172178#L2119-28 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 172172#L2140-28 assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 172164#L1381-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 172163#L1438-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 172162#L709-67 assume !(0 == isFloorCalling_~floorID#1); 172157#L713-67 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 172159#L727-67 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 184353#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 184352#L2119-22 assume !(0 == buttonForFloorIsPressed_~floorID#1); 184348#L2123-22 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 184347#L2140-22 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 184345#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 184344#L2727-2 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 184343#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 170720#L2955-2 assume !(1 == ~doorState~0); 170719#L2961-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 170717#L2306-5 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 170713#L1283-14 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 170459#L2310-5 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 170452#L2477-5 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 170448#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 170447#L2682-6 assume !(1 == ~currentHeading~0); 168428#L2692-6 assume !(0 == ~currentFloorID~0); 168429#L2698-6 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 167264#L2703-6 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 165649#L2985-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 185105#L1446-2 assume !(-1 == ~expectedDirection~0); 185103#L1455-2 assume true; 185101#L1459-2 assume !(1 == ~expectedDirection~0); 185099#L1474-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 185098#L2987-2 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 185097#L181 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 185095#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 185090#L479 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 185089#L980 assume 0 == initPersonOnFloor_~floor#1; 185079#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 182733#L1122 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 182416#L772 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 182410#L793 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 182408#L1124 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 182406#L113 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 182404#L2102-1 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 182402#L2154-5 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 182400#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 182396#L1377-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 182391#L2119-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 182390#L2140-17 assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 182379#L1381-1 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 182376#L1438-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 182375#L709-46 assume !(0 == isFloorCalling_~floorID#1); 182365#L713-46 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 182352#L727-46 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 182351#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 182348#L2119-11 assume !(0 == buttonForFloorIsPressed_~floorID#1); 182259#L2123-11 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 182255#L2140-11 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 182251#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 182249#L2727-1 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 182248#L2864-1 assume !(0 != timeShift_~tmp___9~3#1); 182246#L2955-1 assume !(1 == ~doorState~0); 182245#L2961-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 182243#L2306-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 182244#L1283-9 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 182209#L2310-3 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 182202#L2477-3 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 182201#L2963-1 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 182174#L2682-3 assume !(1 == ~currentHeading~0); 182172#L2692-3 assume !(0 == ~currentFloorID~0); 166972#L2698-3 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 166973#L2703-3 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 163124#L2985-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 163125#L1446-1 assume !(-1 == ~expectedDirection~0); 168103#L1455-1 assume true; 168912#L1459-1 assume !(1 == ~expectedDirection~0); 167912#L1474-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 166499#L2987-1 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 163786#L198 [2024-11-17 08:39:31,420 INFO L747 eck$LassoCheckResult]: Loop: 163786#L198 assume true; 167542#L198-1 assume !false; 168966#cleanup_while_0_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 180976#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 177540#L1973 assume true;cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 176778#L206 assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 176772#L709-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 176773#L727-25 assume true;anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 176445#L2210 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 176441#L2260 assume true;isIdle_#t~ret67#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 176439#L2287 assume true;cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 176437#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 176434#L2102 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 176432#L2154-2 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 176430#L1315 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 176431#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 176424#L2119-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 176419#L2140-6 assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 176400#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 176392#L1438 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 176395#L709-20 assume !(0 == isFloorCalling_~floorID#1); 176361#L713-20 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 176359#L727-20 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 176358#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 176357#L2119 assume !(0 == buttonForFloorIsPressed_~floorID#1); 176353#L2123 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 176352#L2140 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 176350#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 176349#L2727 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 175127#L2864 assume !(0 != timeShift_~tmp___9~3#1); 175126#L2955 assume 1 == ~doorState~0;~doorState~0 := 0; 175125#L2961 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 175124#L2306-1 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 164181#L1283-4 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 164182#L2310-1 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 162856#L2477-1 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 168792#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 168794#L2682 assume !(1 == ~currentHeading~0); 174967#L2692 assume !(0 == ~currentFloorID~0); 168989#L2698 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 167594#L2703 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 167595#L2985 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 188176#L1446 assume !(-1 == ~expectedDirection~0); 188174#L1455 assume true; 168585#L1459 assume !(1 == ~expectedDirection~0); 168587#L1474 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 163785#L2987 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 163786#L198 [2024-11-17 08:39:31,421 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:31,421 INFO L85 PathProgramCache]: Analyzing trace with hash -915721660, now seen corresponding path program 1 times [2024-11-17 08:39:31,422 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:31,422 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [927559878] [2024-11-17 08:39:31,422 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:31,422 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:31,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:31,771 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:31,771 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:31,771 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [927559878] [2024-11-17 08:39:31,771 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [927559878] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:31,772 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:31,772 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:31,772 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1986744211] [2024-11-17 08:39:31,772 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:31,772 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:31,772 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:31,773 INFO L85 PathProgramCache]: Analyzing trace with hash 1537822310, now seen corresponding path program 1 times [2024-11-17 08:39:31,773 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:31,773 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [299747128] [2024-11-17 08:39:31,773 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:31,773 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:31,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:31,834 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:31,834 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:31,834 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [299747128] [2024-11-17 08:39:31,835 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [299747128] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:31,835 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:31,835 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-17 08:39:31,835 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1641282648] [2024-11-17 08:39:31,835 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:31,835 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:31,836 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:31,836 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-17 08:39:31,836 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-17 08:39:31,836 INFO L87 Difference]: Start difference. First operand 25855 states and 47331 transitions. cyclomatic complexity: 21477 Second operand has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 6 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:32,644 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:32,644 INFO L93 Difference]: Finished difference Result 46733 states and 85919 transitions. [2024-11-17 08:39:32,644 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 46733 states and 85919 transitions. [2024-11-17 08:39:32,794 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11555 [2024-11-17 08:39:32,907 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 46733 states to 46733 states and 85919 transitions. [2024-11-17 08:39:32,908 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 46733 [2024-11-17 08:39:33,112 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 46733 [2024-11-17 08:39:33,112 INFO L73 IsDeterministic]: Start isDeterministic. Operand 46733 states and 85919 transitions. [2024-11-17 08:39:33,172 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:33,172 INFO L218 hiAutomatonCegarLoop]: Abstraction has 46733 states and 85919 transitions. [2024-11-17 08:39:33,201 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46733 states and 85919 transitions. [2024-11-17 08:39:33,741 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46733 to 46709. [2024-11-17 08:39:33,790 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46709 states, 46709 states have (on average 1.838682052709328) internal successors, (85883), 46708 states have internal predecessors, (85883), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:33,880 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46709 states to 46709 states and 85883 transitions. [2024-11-17 08:39:33,880 INFO L240 hiAutomatonCegarLoop]: Abstraction has 46709 states and 85883 transitions. [2024-11-17 08:39:33,880 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-17 08:39:33,881 INFO L425 stractBuchiCegarLoop]: Abstraction has 46709 states and 85883 transitions. [2024-11-17 08:39:33,881 INFO L332 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2024-11-17 08:39:33,881 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 46709 states and 85883 transitions. [2024-11-17 08:39:34,217 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11549 [2024-11-17 08:39:34,217 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:34,217 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:34,222 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:34,222 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:34,223 INFO L745 eck$LassoCheckResult]: Stem: 240582#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 240583#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 240111#L1866 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 240112#L1859 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 236143#L1874 assume true;main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 236144#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 239076#L368 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 237338#L702 assume true;assume { :end_inline_initFloors } true; 237339#L1942 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 237693#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 237694#L479-1 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 238293#L980-1 assume 0 == initPersonOnFloor_~floor#1; 239220#L981-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 235758#L1122-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 240978#L772-1 assume !(0 == callOnFloor_~floorID#1); 239456#L775-1 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 236929#L793-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 240329#L1124-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 240609#L113-1 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 240587#L2102-4 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 236240#L2154-14 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 236241#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 241329#L1377-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 241176#L2119-50 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 237332#L2140-50 assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 237333#L1381-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 235600#L1438-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 237365#L709-109 assume !(0 == isFloorCalling_~floorID#1); 237366#L713-109 assume !(1 == isFloorCalling_~floorID#1); 240982#L717-109 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 238954#L727-109 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 236395#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 236396#L2119-44 assume !(0 == buttonForFloorIsPressed_~floorID#1); 237722#L2123-44 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 236765#L2140-44 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 235738#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 235740#L2727-4 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 241553#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 235575#L2955-4 assume !(1 == ~doorState~0); 235576#L2961-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 236404#L2306-9 assume !(1 == stopRequestedInDirection_~dir#1); 236405#L2475-9 assume !(0 == ~currentFloorID~0); 239357#L2481-9 assume ~currentFloorID~0 > 0; 236467#L2482-9 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 236134#L709-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 236136#L727-104 assume true;stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 241404#L2486-9 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 236005#L2477-9 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 237904#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 237906#L2682-12 assume !(1 == ~currentHeading~0); 260297#L2692-12 assume !(0 == ~currentFloorID~0); 236982#L2698-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 236983#L2703-12 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 260288#L2985-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 260283#L1446-4 assume !(-1 == ~expectedDirection~0); 260280#L1455-4 assume true; 260274#L1459-4 assume !(1 == ~expectedDirection~0); 260271#L1474-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 260269#L2987-4 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 260267#L2102-3 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 260266#L2154-11 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 260265#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 241536#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 260263#L1384-3 assume true; 260261#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 260260#L1395-3 assume true; 260258#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 260257#L1406-3 assume true; 260255#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 260254#L1417-3 assume true; 260252#L1421-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 260250#L1438-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 260247#L709-88 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 260245#L727-88 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 260244#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 260240#L2119-33 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 260205#L2140-33 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 260199#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 260192#L2727-3 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 260189#L2864-3 assume !(0 != timeShift_~tmp___9~3#1); 260082#L2955-3 assume !(1 == ~doorState~0); 260079#L2961-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 259883#L2306-7 assume !(1 == stopRequestedInDirection_~dir#1); 259816#L2475-7 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 259812#L2477-7 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 259806#L2963-3 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 259799#L2682-9 assume !(1 == ~currentHeading~0); 259795#L2692-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 239382#L2698-9 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 259780#L2703-9 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 259772#L2985-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 259768#L1446-3 assume !(-1 == ~expectedDirection~0); 259760#L1455-3 assume true; 259750#L1459-3 assume !(1 == ~expectedDirection~0); 259748#L1474-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 259734#L2987-3 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 259727#L2102-2 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 259726#L2154-8 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 259724#L1315-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 259723#L1316-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 254293#L1323-2 assume true; 253298#L1327-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 253297#L2119-24 assume !(0 == buttonForFloorIsPressed_~floorID#1); 253293#L2123-24 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 251957#L2140-24 assume true;__utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 248568#L1331-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 248561#L1438-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 248559#L709-67 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 248527#L727-67 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 248525#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 248520#L2119-22 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 248519#L2140-22 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 248516#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 248514#L2727-2 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 248511#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 248509#L2955-2 assume !(1 == ~doorState~0); 248506#L2961-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 248504#L2306-5 assume !(1 == stopRequestedInDirection_~dir#1); 248477#L2475-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 248463#L2477-5 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 248462#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 248301#L2682-6 assume !(1 == ~currentHeading~0); 248298#L2692-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 248291#L2698-6 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 248287#L2703-6 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 248285#L2985-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 248283#L1446-2 assume !(-1 == ~expectedDirection~0); 248281#L1455-2 assume true; 248279#L1459-2 assume !(1 == ~expectedDirection~0); 248277#L1474-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 248276#L2987-2 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 248275#L181 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 248273#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 248268#L479 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 248267#L980 assume 0 == initPersonOnFloor_~floor#1; 248257#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 248233#L1122 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 248231#L772 assume !(0 == callOnFloor_~floorID#1); 248227#L775 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 248226#L793 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 248225#L1124 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 248224#L113 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 248223#L2102-1 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 248222#L2154-5 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 248220#L1315-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 248219#L1316-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 248218#L1323-1 assume true; 248196#L1327-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 246036#L2119-13 assume !(0 == buttonForFloorIsPressed_~floorID#1); 246023#L2123-13 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 246016#L2140-13 assume true;__utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 246010#L1331-1 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 245894#L1438-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 245193#L709-46 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 245188#L727-46 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 245183#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 245184#L2119-11 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 245187#L2140-11 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 245185#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 245186#L2727-1 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 245126#L2864-1 assume !(0 != timeShift_~tmp___9~3#1); 245125#L2955-1 assume !(1 == ~doorState~0); 245124#L2961-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 244188#L2306-3 assume !(1 == stopRequestedInDirection_~dir#1); 244001#L2475-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 243992#L2477-3 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 243989#L2963-1 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 243971#L2682-3 assume !(1 == ~currentHeading~0); 243965#L2692-3 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 243958#L2698-3 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 243948#L2703-3 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 243938#L2985-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 243931#L1446-1 assume !(-1 == ~expectedDirection~0); 243920#L1455-1 assume true; 241959#L1459-1 assume !(1 == ~expectedDirection~0); 241957#L1474-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 241956#L2987-1 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 241954#L198 [2024-11-17 08:39:34,224 INFO L747 eck$LassoCheckResult]: Loop: 241954#L198 assume true; 241953#L198-1 assume !false; 241950#cleanup_while_0_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 241949#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 241948#L1973 assume true;cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 241944#L206 assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 241939#L709-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 241941#L727-25 assume true;anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 243929#L2210 assume !(0 != anyStopRequested_~tmp___3~1#1); 241841#L2214 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 241838#L2260 assume true;isIdle_#t~ret67#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 241822#L2287 assume true;cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 241823#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 241807#L2102 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 241808#L2154-2 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 241780#L1315 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 241781#L1316 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 241743#L1323 assume true; 241744#L1327 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 241734#L2119-2 assume !(0 == buttonForFloorIsPressed_~floorID#1); 241726#L2123-2 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 241713#L2140-2 assume true;__utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 241708#L1331 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 241702#L1438 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 241700#L709-20 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 241699#L727-20 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 241698#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 241692#L2119 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 241686#L2140 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 241683#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 241681#L2727 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 241677#L2864 assume !(0 != timeShift_~tmp___9~3#1); 241674#L2955 assume 1 == ~doorState~0;~doorState~0 := 0; 241652#L2961 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 241639#L2306-1 assume !(1 == stopRequestedInDirection_~dir#1); 241623#L2475-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 241612#L2477-1 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 241610#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 241611#L2682 assume !(1 == ~currentHeading~0); 241987#L2692 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 241982#L2698 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 241974#L2703 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 241969#L2985 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 241967#L1446 assume !(-1 == ~expectedDirection~0); 241965#L1455 assume true; 241963#L1459 assume !(1 == ~expectedDirection~0); 241958#L1474 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 241955#L2987 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 241954#L198 [2024-11-17 08:39:34,226 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:34,226 INFO L85 PathProgramCache]: Analyzing trace with hash -992903752, now seen corresponding path program 1 times [2024-11-17 08:39:34,226 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:34,226 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [602082743] [2024-11-17 08:39:34,227 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:34,227 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:34,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:34,427 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:34,428 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:34,428 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [602082743] [2024-11-17 08:39:34,428 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [602082743] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:34,428 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:34,428 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:34,428 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1532093232] [2024-11-17 08:39:34,429 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:34,429 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:34,429 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:34,429 INFO L85 PathProgramCache]: Analyzing trace with hash -1559629404, now seen corresponding path program 1 times [2024-11-17 08:39:34,430 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:34,430 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1266276676] [2024-11-17 08:39:34,430 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:34,430 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:34,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:34,584 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:34,584 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:34,584 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1266276676] [2024-11-17 08:39:34,586 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1266276676] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:34,586 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:34,586 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-17 08:39:34,586 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [426881132] [2024-11-17 08:39:34,587 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:34,587 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:34,587 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:34,587 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-17 08:39:34,588 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-17 08:39:34,588 INFO L87 Difference]: Start difference. First operand 46709 states and 85883 transitions. cyclomatic complexity: 39175 Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:35,811 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:35,811 INFO L93 Difference]: Finished difference Result 92225 states and 169595 transitions. [2024-11-17 08:39:35,811 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 92225 states and 169595 transitions. [2024-11-17 08:39:36,334 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 22596 [2024-11-17 08:39:36,557 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 92225 states to 92225 states and 169595 transitions. [2024-11-17 08:39:36,557 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 92225 [2024-11-17 08:39:36,759 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 92225 [2024-11-17 08:39:36,760 INFO L73 IsDeterministic]: Start isDeterministic. Operand 92225 states and 169595 transitions. [2024-11-17 08:39:36,804 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:36,804 INFO L218 hiAutomatonCegarLoop]: Abstraction has 92225 states and 169595 transitions. [2024-11-17 08:39:36,886 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92225 states and 169595 transitions. [2024-11-17 08:39:37,844 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92225 to 92201. [2024-11-17 08:39:37,934 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92201 states, 92201 states have (on average 1.8391449116603942) internal successors, (169571), 92200 states have internal predecessors, (169571), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:38,128 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92201 states to 92201 states and 169571 transitions. [2024-11-17 08:39:38,128 INFO L240 hiAutomatonCegarLoop]: Abstraction has 92201 states and 169571 transitions. [2024-11-17 08:39:38,129 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-17 08:39:38,129 INFO L425 stractBuchiCegarLoop]: Abstraction has 92201 states and 169571 transitions. [2024-11-17 08:39:38,129 INFO L332 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2024-11-17 08:39:38,129 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 92201 states and 169571 transitions. [2024-11-17 08:39:38,798 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 22590 [2024-11-17 08:39:38,798 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:38,798 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:38,807 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:38,807 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:38,808 INFO L745 eck$LassoCheckResult]: Stem: 379608#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 379609#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 379122#L1866 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 379123#L1859 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 375093#L1874 assume true;main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 375094#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 378063#L368 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 376303#L702 assume true;assume { :end_inline_initFloors } true; 376304#L1942 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 376660#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 376661#L479-1 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 377263#L980-1 assume 0 == initPersonOnFloor_~floor#1; 378209#L981-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 374707#L1122-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 380021#L772-1 assume !(0 == callOnFloor_~floorID#1); 378454#L775-1 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 375884#L793-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 384767#L1124-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 384766#L113-1 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 384765#L2102-4 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 384764#L2154-14 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 384763#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 384761#L1377-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 384762#L2119-50 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 384785#L2140-50 assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 384737#L1381-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 384736#L1438-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 384735#L709-109 assume !(0 == isFloorCalling_~floorID#1); 384734#L713-109 assume !(1 == isFloorCalling_~floorID#1); 384732#L717-109 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 384730#L727-109 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 384729#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 384728#L2119-44 assume !(0 == buttonForFloorIsPressed_~floorID#1); 384724#L2123-44 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 384723#L2140-44 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 384721#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 384720#L2727-4 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 384718#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 384717#L2955-4 assume !(1 == ~doorState~0); 384716#L2961-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 384715#L2306-9 assume !(1 == stopRequestedInDirection_~dir#1); 384714#L2475-9 assume !(0 == ~currentFloorID~0); 384713#L2481-9 assume ~currentFloorID~0 > 0; 384712#L2482-9 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 384684#L709-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 384679#L727-104 assume true;stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 384672#L2486-9 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 384660#L2477-9 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 384658#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 384563#L2682-12 assume !(1 == ~currentHeading~0); 382839#L2692-12 assume !(0 == ~currentFloorID~0); 382837#L2698-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 382835#L2703-12 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 382831#L2985-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 382826#L1446-4 assume !(-1 == ~expectedDirection~0); 382823#L1455-4 assume true; 382818#L1459-4 assume !(1 == ~expectedDirection~0); 382815#L1474-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 382813#L2987-4 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 382811#L2102-3 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 382809#L2154-11 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 382808#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 382804#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 382803#L1384-3 assume true; 382801#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 382799#L1395-3 assume true; 382797#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 381537#L1406-3 assume true; 381535#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 381534#L1417-3 assume true; 381532#L1421-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 381531#L1438-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 381529#L709-88 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 381528#L727-88 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 381527#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 381292#L2119-33 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 381284#L2140-33 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 381281#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 381278#L2727-3 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 381276#L2864-3 assume !(0 != timeShift_~tmp___9~3#1); 381275#L2955-3 assume !(1 == ~doorState~0); 381274#L2961-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 381269#L2306-7 assume !(1 == stopRequestedInDirection_~dir#1); 380927#L2475-7 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 380906#L2477-7 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 380883#L2963-3 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 380872#L2682-9 assume !(1 == ~currentHeading~0); 380860#L2692-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 380852#L2698-9 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 380842#L2703-9 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 380837#L2985-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 380838#L1446-3 assume !(-1 == ~expectedDirection~0); 380827#L1455-3 assume true; 380828#L1459-3 assume !(1 == ~expectedDirection~0); 380821#L1474-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 380822#L2987-3 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 380817#L2102-2 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 380818#L2154-8 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 380812#L1315-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 380813#L1316-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 380807#L1323-2 assume true; 380808#L1327-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 380800#L2119-24 assume !(0 == buttonForFloorIsPressed_~floorID#1); 380791#L2123-24 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 380778#L2140-24 assume true;__utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 380773#L1331-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 380767#L1438-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 380765#L709-67 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 380764#L727-67 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 380762#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 380755#L2119-22 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 380756#L2140-22 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 421272#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 421273#L2727-2 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 421267#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 421268#L2955-2 assume !(1 == ~doorState~0); 380746#L2961-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 380743#L2306-5 assume !(1 == stopRequestedInDirection_~dir#1); 380745#L2475-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 421815#L2477-5 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 440811#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 440714#L2682-6 assume !(1 == ~currentHeading~0); 440711#L2692-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 380146#L2698-6 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 440708#L2703-6 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 440706#L2985-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 440704#L1446-2 assume !(-1 == ~expectedDirection~0); 440702#L1455-2 assume true; 440700#L1459-2 assume !(1 == ~expectedDirection~0); 440698#L1474-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 440697#L2987-2 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 440696#L181 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 440694#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 440689#L479 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 440688#L980 assume 0 == initPersonOnFloor_~floor#1; 440678#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 440654#L1122 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 421279#L772 assume !(0 == callOnFloor_~floorID#1); 421280#L775 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 445015#L793 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 445014#L1124 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 445013#L113 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 445012#L2102-1 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 445011#L2154-5 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 445010#L1315-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 438687#L1316-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 438593#L1323-1 assume true; 405309#L1327-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 405307#L2119-13 assume !(0 == buttonForFloorIsPressed_~floorID#1); 405303#L2123-13 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 405301#L2140-13 assume true;__utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 405274#L1331-1 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 405271#L1438-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 405269#L709-46 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 405268#L727-46 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 405267#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 405264#L2119-11 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 405261#L2140-11 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 405259#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 405258#L2727-1 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 405256#L2864-1 assume !(0 != timeShift_~tmp___9~3#1); 405255#L2955-1 assume !(1 == ~doorState~0); 405254#L2961-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 405252#L2306-3 assume !(1 == stopRequestedInDirection_~dir#1); 405054#L2475-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 405042#L2477-3 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 405038#L2963-1 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 404959#L2682-3 assume !(1 == ~currentHeading~0); 404955#L2692-3 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 404950#L2698-3 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 404946#L2703-3 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 404942#L2985-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 404937#L1446-1 assume !(-1 == ~expectedDirection~0); 404934#L1455-1 assume true; 404884#L1459-1 assume !(1 == ~expectedDirection~0); 404883#L1474-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 404881#L2987-1 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 404879#L198 [2024-11-17 08:39:38,813 INFO L747 eck$LassoCheckResult]: Loop: 404879#L198 assume true; 404878#L198-1 assume !false; 404877#cleanup_while_0_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 404870#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 404869#L1973 assume true;cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 404868#L206 assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 400075#L709-25 assume !(0 == isFloorCalling_~floorID#1); 400076#L713-25 assume !(1 == isFloorCalling_~floorID#1); 400074#L717-25 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 400070#L727-25 assume true;anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 400066#L2210 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 400067#L2260 assume true;isIdle_#t~ret67#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 428959#L2287 assume true;cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 428958#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 428957#L2102 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 428956#L2154-2 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 428954#L1315 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 428953#L1316 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 428952#L1323 assume true; 428951#L1327 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 411658#L2119-2 assume !(0 == buttonForFloorIsPressed_~floorID#1); 411648#L2123-2 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 411646#L2140-2 assume true;__utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 411644#L1331 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 411638#L1438 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 411636#L709-20 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 411631#L727-20 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 411626#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 411627#L2119 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 411630#L2140 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 411628#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 411629#L2727 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 390325#L2864 assume !(0 != timeShift_~tmp___9~3#1); 390322#L2955 assume 1 == ~doorState~0;~doorState~0 := 0; 390320#L2961 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 390316#L2306-1 assume !(1 == stopRequestedInDirection_~dir#1); 390318#L2475-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 400048#L2477-1 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 404975#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 404970#L2682 assume !(1 == ~currentHeading~0); 404968#L2692 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 404962#L2698 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 404958#L2703 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 404952#L2985 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 404948#L1446 assume !(-1 == ~expectedDirection~0); 404943#L1455 assume true; 404940#L1459 assume !(1 == ~expectedDirection~0); 404935#L1474 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 404880#L2987 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 404879#L198 [2024-11-17 08:39:38,815 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:38,816 INFO L85 PathProgramCache]: Analyzing trace with hash -992903752, now seen corresponding path program 2 times [2024-11-17 08:39:38,816 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:38,816 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1471657017] [2024-11-17 08:39:38,816 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:38,816 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:38,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:38,972 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:38,972 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:38,972 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1471657017] [2024-11-17 08:39:38,972 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1471657017] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:38,973 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:38,973 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:38,973 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [384102935] [2024-11-17 08:39:38,973 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:38,973 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:38,974 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:38,974 INFO L85 PathProgramCache]: Analyzing trace with hash 357796783, now seen corresponding path program 1 times [2024-11-17 08:39:38,974 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:38,974 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [938254032] [2024-11-17 08:39:38,975 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:38,975 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:38,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:39,005 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:39,006 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:39,006 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [938254032] [2024-11-17 08:39:39,006 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [938254032] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:39,006 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:39,006 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-17 08:39:39,006 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [792007177] [2024-11-17 08:39:39,006 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:39,007 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:39,007 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:39,007 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-17 08:39:39,007 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-17 08:39:39,008 INFO L87 Difference]: Start difference. First operand 92201 states and 169571 transitions. cyclomatic complexity: 77371 Second operand has 3 states, 3 states have (on average 16.333333333333332) internal successors, (49), 3 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:40,240 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:40,240 INFO L93 Difference]: Finished difference Result 91249 states and 167795 transitions. [2024-11-17 08:39:40,240 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 91249 states and 167795 transitions. [2024-11-17 08:39:40,516 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 22014 [2024-11-17 08:39:40,991 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 91249 states to 91249 states and 167795 transitions. [2024-11-17 08:39:40,991 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 91249 [2024-11-17 08:39:41,044 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 91249 [2024-11-17 08:39:41,044 INFO L73 IsDeterministic]: Start isDeterministic. Operand 91249 states and 167795 transitions. [2024-11-17 08:39:41,088 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:41,089 INFO L218 hiAutomatonCegarLoop]: Abstraction has 91249 states and 167795 transitions. [2024-11-17 08:39:41,132 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91249 states and 167795 transitions. [2024-11-17 08:39:41,988 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91249 to 91249. [2024-11-17 08:39:42,068 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91249 states, 91249 states have (on average 1.8388694670626526) internal successors, (167795), 91248 states have internal predecessors, (167795), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:42,246 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91249 states to 91249 states and 167795 transitions. [2024-11-17 08:39:42,246 INFO L240 hiAutomatonCegarLoop]: Abstraction has 91249 states and 167795 transitions. [2024-11-17 08:39:42,247 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-17 08:39:42,247 INFO L425 stractBuchiCegarLoop]: Abstraction has 91249 states and 167795 transitions. [2024-11-17 08:39:42,247 INFO L332 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2024-11-17 08:39:42,247 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 91249 states and 167795 transitions. [2024-11-17 08:39:42,983 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 22014 [2024-11-17 08:39:42,983 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:42,983 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:42,989 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:42,990 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:42,990 INFO L745 eck$LassoCheckResult]: Stem: 562936#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 562937#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 562466#L1866 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 562467#L1859 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 558540#L1874 assume true;main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 558541#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 561429#L368 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 559718#L702 assume true;assume { :end_inline_initFloors } true; 559719#L1942 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 560054#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 560055#L479-1 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 560642#L980-1 assume 0 == initPersonOnFloor_~floor#1; 561571#L981-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 558154#L1122-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 563322#L772-1 assume !(0 == callOnFloor_~floorID#1); 561815#L775-1 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 559320#L793-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 564305#L1124-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 564304#L113-1 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 564303#L2102-4 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 564302#L2154-14 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 564301#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 564299#L1377-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 564300#L2119-50 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 564323#L2140-50 assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 564279#L1381-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 564278#L1438-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 564277#L709-109 assume !(0 == isFloorCalling_~floorID#1); 564276#L713-109 assume !(1 == isFloorCalling_~floorID#1); 564274#L717-109 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 564272#L727-109 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 564271#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 564270#L2119-44 assume !(0 == buttonForFloorIsPressed_~floorID#1); 564243#L2123-44 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 564242#L2140-44 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 564241#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 564240#L2727-4 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 564239#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 564238#L2955-4 assume !(1 == ~doorState~0); 564237#L2961-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 564236#L2306-9 assume !(1 == stopRequestedInDirection_~dir#1); 564235#L2475-9 assume !(0 == ~currentFloorID~0); 564234#L2481-9 assume ~currentFloorID~0 > 0; 564233#L2482-9 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 558532#L709-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 558533#L727-104 assume true;stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 563780#L2486-9 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 564168#L2477-9 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 564166#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 564167#L2682-12 assume !(1 == ~currentHeading~0); 582667#L2692-12 assume !(0 == ~currentFloorID~0); 582666#L2698-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 582665#L2703-12 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 582663#L2985-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 582661#L1446-4 assume !(-1 == ~expectedDirection~0); 582659#L1455-4 assume true; 582657#L1459-4 assume !(1 == ~expectedDirection~0); 582655#L1474-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 582623#L2987-4 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 582621#L2102-3 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 582618#L2154-11 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 582617#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 564065#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 582615#L1384-3 assume true; 582609#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 582607#L1395-3 assume true; 582604#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 582603#L1406-3 assume true; 582596#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 582594#L1417-3 assume true; 582591#L1421-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 582586#L1438-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 582583#L709-88 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 582582#L727-88 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 582581#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 582577#L2119-33 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 582575#L2140-33 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 582573#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 582572#L2727-3 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 582570#L2864-3 assume !(0 != timeShift_~tmp___9~3#1); 582569#L2955-3 assume !(1 == ~doorState~0); 582568#L2961-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 582567#L2306-7 assume !(1 == stopRequestedInDirection_~dir#1); 582565#L2475-7 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 582564#L2477-7 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 582562#L2963-3 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 582253#L2682-9 assume !(1 == ~currentHeading~0); 579198#L2692-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 579195#L2698-9 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 578363#L2703-9 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 578330#L2985-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 578327#L1446-3 assume !(-1 == ~expectedDirection~0); 578173#L1455-3 assume true; 578167#L1459-3 assume !(1 == ~expectedDirection~0); 578165#L1474-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 578163#L2987-3 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 578161#L2102-2 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 578128#L2154-8 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 578124#L1315-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 578120#L1316-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 578114#L1323-2 assume true; 578108#L1327-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 573061#L2119-24 assume !(0 == buttonForFloorIsPressed_~floorID#1); 573053#L2123-24 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 573051#L2140-24 assume true;__utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 573047#L1331-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 573041#L1438-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 573038#L709-67 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 573036#L727-67 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 573035#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 572868#L2119-22 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 572862#L2140-22 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 572859#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 572858#L2727-2 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 572856#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 572854#L2955-2 assume !(1 == ~doorState~0); 572853#L2961-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 572852#L2306-5 assume !(1 == stopRequestedInDirection_~dir#1); 572298#L2475-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 572283#L2477-5 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 572281#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 572278#L2682-6 assume !(1 == ~currentHeading~0); 572275#L2692-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 572270#L2698-6 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 572263#L2703-6 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 572261#L2985-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 572259#L1446-2 assume !(-1 == ~expectedDirection~0); 572257#L1455-2 assume true; 572255#L1459-2 assume !(1 == ~expectedDirection~0); 572253#L1474-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 572252#L2987-2 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 572251#L181 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 572249#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 572244#L479 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 572243#L980 assume 0 == initPersonOnFloor_~floor#1; 572201#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 572176#L1122 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 572172#L772 assume !(0 == callOnFloor_~floorID#1); 572164#L775 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 572162#L793 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 572160#L1124 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 572158#L113 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 572156#L2102-1 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 572154#L2154-5 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 572151#L1315-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 572148#L1316-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 572146#L1323-1 assume true; 572143#L1327-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 566376#L2119-13 assume !(0 == buttonForFloorIsPressed_~floorID#1); 566312#L2123-13 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 566310#L2140-13 assume true;__utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 566293#L1331-1 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 566289#L1438-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 566287#L709-46 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 566255#L727-46 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 566253#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 566245#L2119-11 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 566242#L2140-11 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 566240#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 566236#L2727-1 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 566234#L2864-1 assume !(0 != timeShift_~tmp___9~3#1); 566233#L2955-1 assume !(1 == ~doorState~0); 566228#L2961-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 565273#L2306-3 assume !(1 == stopRequestedInDirection_~dir#1); 564866#L2475-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 564856#L2477-3 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 564854#L2963-1 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 564852#L2682-3 assume !(1 == ~currentHeading~0); 564850#L2692-3 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 564848#L2698-3 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 564756#L2703-3 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 564720#L2985-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 564717#L1446-1 assume !(-1 == ~expectedDirection~0); 564712#L1455-1 assume true; 564708#L1459-1 assume !(1 == ~expectedDirection~0); 564704#L1474-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 564702#L2987-1 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 564700#L198 [2024-11-17 08:39:42,991 INFO L747 eck$LassoCheckResult]: Loop: 564700#L198 assume true; 564699#L198-1 assume !false; 564698#cleanup_while_0_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 564697#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 564696#L1973 assume true;cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 564695#L206 assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 564694#L709-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 564693#L727-25 assume true;anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 564690#L2210 assume !(0 != anyStopRequested_~tmp___3~1#1); 564692#L2214 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 593396#L709-24 assume !(0 == isFloorCalling_~floorID#1); 593393#L713-24 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 593391#L727-24 assume true;anyStopRequested_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret63#1;havoc anyStopRequested_#t~ret63#1; 564652#L2221 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 564648#L2260 assume true;isIdle_#t~ret67#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 564643#L2287 assume true;cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 564644#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 564639#L2102 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 564640#L2154-2 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 564634#L1315 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 564635#L1316 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 564629#L1323 assume true; 564630#L1327 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 564622#L2119-2 assume !(0 == buttonForFloorIsPressed_~floorID#1); 564613#L2123-2 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 564600#L2140-2 assume true;__utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 564595#L1331 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 564589#L1438 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 564587#L709-20 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 564586#L727-20 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 564584#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 564581#L2119 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 564583#L2140 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 567388#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 567389#L2727 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 564569#L2864 assume !(0 != timeShift_~tmp___9~3#1); 564567#L2955 assume 1 == ~doorState~0;~doorState~0 := 0; 564568#L2961 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 565400#L2306-1 assume !(1 == stopRequestedInDirection_~dir#1); 565401#L2475-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 565396#L2477-1 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 564922#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 564771#L2682 assume !(1 == ~currentHeading~0); 564747#L2692 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 564736#L2698 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 564725#L2703 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 564719#L2985 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 564714#L1446 assume !(-1 == ~expectedDirection~0); 564711#L1455 assume true; 564706#L1459 assume !(1 == ~expectedDirection~0); 564703#L1474 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 564701#L2987 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 564700#L198 [2024-11-17 08:39:42,992 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:42,992 INFO L85 PathProgramCache]: Analyzing trace with hash -992903752, now seen corresponding path program 3 times [2024-11-17 08:39:42,992 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:42,992 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [685540864] [2024-11-17 08:39:42,992 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:42,992 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:43,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:43,227 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:43,227 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:43,227 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [685540864] [2024-11-17 08:39:43,227 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [685540864] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:43,227 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:43,227 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:43,228 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1222568606] [2024-11-17 08:39:43,228 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:43,229 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:43,230 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:43,230 INFO L85 PathProgramCache]: Analyzing trace with hash 214251216, now seen corresponding path program 1 times [2024-11-17 08:39:43,230 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:43,230 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1845589776] [2024-11-17 08:39:43,230 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:43,230 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:43,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:43,287 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:43,287 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:43,288 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1845589776] [2024-11-17 08:39:43,288 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1845589776] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:43,288 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:43,288 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-17 08:39:43,288 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1907590595] [2024-11-17 08:39:43,288 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:43,288 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:43,288 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:43,289 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-17 08:39:43,289 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-17 08:39:43,289 INFO L87 Difference]: Start difference. First operand 91249 states and 167795 transitions. cyclomatic complexity: 76547 Second operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 6 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:44,065 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:44,065 INFO L93 Difference]: Finished difference Result 90233 states and 165939 transitions. [2024-11-17 08:39:44,065 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 90233 states and 165939 transitions. [2024-11-17 08:39:44,767 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 21760 [2024-11-17 08:39:44,974 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 90233 states to 90233 states and 165939 transitions. [2024-11-17 08:39:44,975 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 90233 [2024-11-17 08:39:45,046 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 90233 [2024-11-17 08:39:45,046 INFO L73 IsDeterministic]: Start isDeterministic. Operand 90233 states and 165939 transitions. [2024-11-17 08:39:45,100 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:45,100 INFO L218 hiAutomatonCegarLoop]: Abstraction has 90233 states and 165939 transitions. [2024-11-17 08:39:45,160 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90233 states and 165939 transitions. [2024-11-17 08:39:46,036 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90233 to 90169. [2024-11-17 08:39:46,112 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90169 states, 90169 states have (on average 1.839335026450332) internal successors, (165851), 90168 states have internal predecessors, (165851), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:46,248 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90169 states to 90169 states and 165851 transitions. [2024-11-17 08:39:46,249 INFO L240 hiAutomatonCegarLoop]: Abstraction has 90169 states and 165851 transitions. [2024-11-17 08:39:46,249 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-17 08:39:46,249 INFO L425 stractBuchiCegarLoop]: Abstraction has 90169 states and 165851 transitions. [2024-11-17 08:39:46,249 INFO L332 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2024-11-17 08:39:46,250 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 90169 states and 165851 transitions. [2024-11-17 08:39:46,963 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 21744 [2024-11-17 08:39:46,963 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:46,963 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:46,965 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:46,966 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:46,966 INFO L745 eck$LassoCheckResult]: Stem: 744474#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 744475#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 743996#L1866 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 743997#L1859 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 740039#L1874 assume true;main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 740040#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 742936#L368 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 741222#L702 assume true;assume { :end_inline_initFloors } true; 741223#L1942 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 741562#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 741563#L479-1 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 742155#L980-1 assume 0 == initPersonOnFloor_~floor#1; 743089#L981-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 739653#L1122-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 744881#L772-1 assume !(0 == callOnFloor_~floorID#1); 743331#L775-1 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 740823#L793-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 744219#L1124-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 744498#L113-1 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 744478#L2102-4 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 740134#L2154-14 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 740135#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 745271#L1377-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 745115#L2119-50 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 741216#L2140-50 assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 741217#L1381-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 739499#L1438-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 741245#L709-109 assume !(0 == isFloorCalling_~floorID#1); 741246#L713-109 assume !(1 == isFloorCalling_~floorID#1); 744886#L717-109 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 742816#L727-109 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 740285#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 740286#L2119-44 assume !(0 == buttonForFloorIsPressed_~floorID#1); 741591#L2123-44 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 740659#L2140-44 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 739634#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 739636#L2727-4 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 745502#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 739476#L2955-4 assume !(1 == ~doorState~0); 739477#L2961-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 740294#L2306-9 assume !(1 == stopRequestedInDirection_~dir#1); 740295#L2475-9 assume !(0 == ~currentFloorID~0); 743229#L2481-9 assume ~currentFloorID~0 > 0; 740357#L2482-9 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 740358#L709-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 745356#L727-104 assume true;stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 745357#L2486-9 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 750263#L2477-9 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 750260#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 750258#L2682-12 assume !(1 == ~currentHeading~0); 750257#L2692-12 assume !(0 == ~currentFloorID~0); 750256#L2698-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 750255#L2703-12 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 750252#L2985-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 750250#L1446-4 assume !(-1 == ~expectedDirection~0); 749732#L1455-4 assume true; 749699#L1459-4 assume !(1 == ~expectedDirection~0); 749696#L1474-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 749694#L2987-4 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 749583#L2102-3 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 749582#L2154-11 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 749581#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 749579#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 749578#L1384-3 assume true; 749576#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 749575#L1395-3 assume true; 749531#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 749522#L1406-3 assume true; 749517#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 749515#L1417-3 assume true; 749510#L1421-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 749509#L1438-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 749507#L709-88 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 749506#L727-88 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 749505#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 749501#L2119-33 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 749499#L2140-33 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 749497#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 749494#L2727-3 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 749492#L2864-3 assume !(0 != timeShift_~tmp___9~3#1); 749423#L2955-3 assume !(1 == ~doorState~0); 749420#L2961-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 749392#L2306-7 assume !(1 == stopRequestedInDirection_~dir#1); 749364#L2475-7 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 749361#L2477-7 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 749348#L2963-3 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 749340#L2682-9 assume !(1 == ~currentHeading~0); 749331#L2692-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 749325#L2698-9 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 749316#L2703-9 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 749307#L2985-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 749308#L1446-3 assume !(-1 == ~expectedDirection~0); 749301#L1455-3 assume true; 749302#L1459-3 assume !(1 == ~expectedDirection~0); 749293#L1474-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 749294#L2987-3 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 749289#L2102-2 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 749290#L2154-8 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 749281#L1315-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 749282#L1316-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 749272#L1323-2 assume true; 749273#L1327-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 746308#L2119-24 assume !(0 == buttonForFloorIsPressed_~floorID#1); 746299#L2123-24 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 746297#L2140-24 assume true;__utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 746293#L1331-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 746287#L1438-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 746284#L709-67 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 746282#L727-67 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 746281#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 746274#L2119-22 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 746273#L2140-22 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 746271#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 746270#L2727-2 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 746267#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 746266#L2955-2 assume !(1 == ~doorState~0); 746265#L2961-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 746264#L2306-5 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 746263#L1283-14 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 745941#L2310-5 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 745901#L2477-5 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 745899#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 745783#L2682-6 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 745778#L1283-10 assume true;continueInDirection_#t~ret79#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret79#1;havoc continueInDirection_#t~ret79#1; 745770#L2686-6 assume !(0 != continueInDirection_~tmp~19#1); 745771#L2698-6 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 793097#L2703-6 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 793096#L2985-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 797794#L1446-2 assume !(-1 == ~expectedDirection~0); 797792#L1455-2 assume true; 797790#L1459-2 assume !(1 == ~expectedDirection~0); 797788#L1474-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 797787#L2987-2 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 797786#L181 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 797784#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 797779#L479 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 797778#L980 assume 0 == initPersonOnFloor_~floor#1; 793010#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 792987#L1122 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 792981#L772 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 792983#L793 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 812543#L1124 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 812542#L113 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 812541#L2102-1 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 812540#L2154-5 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 812539#L1315-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 812538#L1316-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 739470#L2119-12 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 739472#L2140-12 assume true;__utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 801227#L1320-1 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 801090#L1438-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 801048#L709-46 assume !(0 == isFloorCalling_~floorID#1); 800897#L713-46 assume !(1 == isFloorCalling_~floorID#1); 800889#L717-46 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 800884#L727-46 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 800883#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 800882#L2119-11 assume !(0 == buttonForFloorIsPressed_~floorID#1); 796625#L2123-11 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 796621#L2140-11 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 796618#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 796616#L2727-1 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 791945#L2864-1 assume !(0 != timeShift_~tmp___9~3#1); 791943#L2955-1 assume !(1 == ~doorState~0); 791941#L2961-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 791940#L2306-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 791924#L1283-9 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 791907#L2310-3 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 791888#L2477-3 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 791886#L2963-1 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 745549#L2682-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 745550#L1283-5 assume true;continueInDirection_#t~ret79#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret79#1;havoc continueInDirection_#t~ret79#1; 745473#L2686-3 assume !(0 != continueInDirection_~tmp~19#1); 743374#L2698-3 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 743375#L2703-3 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 739937#L2985-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 816915#L1446-1 assume !(-1 == ~expectedDirection~0); 816913#L1455-1 assume true; 816903#L1459-1 assume !(1 == ~expectedDirection~0); 816901#L1474-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 816900#L2987-1 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 816893#L198 [2024-11-17 08:39:46,967 INFO L747 eck$LassoCheckResult]: Loop: 816893#L198 assume true; 816891#L198-1 assume !false; 816889#cleanup_while_0_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 816885#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 816883#L1973 assume true;cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 816882#L206 assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 816881#L709-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 816877#L727-25 assume true;anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 816875#L2210 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 816872#L2260 assume true;isIdle_#t~ret67#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 816870#L2287 assume true;cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 816868#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 816866#L2102 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 816864#L2154-2 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 816862#L1315 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 816860#L1316 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 792798#L2119-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 792957#L2140-1 assume true;__utac_acc__Specification3_spec__1_#t~ret26#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret26#1;havoc __utac_acc__Specification3_spec__1_#t~ret26#1; 792753#L1320 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 792745#L1438 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 792743#L709-20 assume !(0 == isFloorCalling_~floorID#1); 792737#L713-20 assume !(1 == isFloorCalling_~floorID#1); 792733#L717-20 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 792702#L727-20 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 792698#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 792632#L2119 assume !(0 == buttonForFloorIsPressed_~floorID#1); 792628#L2123 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 792029#L2140 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 792022#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 792017#L2727 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 775577#L2864 assume !(0 != timeShift_~tmp___9~3#1); 775575#L2955 assume 1 == ~doorState~0;~doorState~0 := 0; 775574#L2961 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 775573#L2306-1 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 775569#L1283-4 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 773522#L2310-1 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 773503#L2477-1 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 773502#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 745551#L2682 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 745552#L1283 assume true;continueInDirection_#t~ret79#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret79#1;havoc continueInDirection_#t~ret79#1; 744178#L2686 assume !(0 != continueInDirection_~tmp~19#1); 744179#L2698 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 743987#L2703 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 743988#L2985 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 816911#L1446 assume !(-1 == ~expectedDirection~0); 816909#L1455 assume true; 816907#L1459 assume !(1 == ~expectedDirection~0); 816902#L1474 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 816899#L2987 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 816893#L198 [2024-11-17 08:39:46,968 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:46,969 INFO L85 PathProgramCache]: Analyzing trace with hash -188374386, now seen corresponding path program 1 times [2024-11-17 08:39:46,969 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:46,969 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1225028563] [2024-11-17 08:39:46,969 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:46,969 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:47,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:47,134 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:47,135 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:47,135 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1225028563] [2024-11-17 08:39:47,135 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1225028563] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:47,135 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:47,135 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:47,135 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1086202675] [2024-11-17 08:39:47,135 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:47,136 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:47,136 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:47,136 INFO L85 PathProgramCache]: Analyzing trace with hash -771703400, now seen corresponding path program 1 times [2024-11-17 08:39:47,136 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:47,137 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [729466743] [2024-11-17 08:39:47,137 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:47,137 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:47,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:47,220 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:47,221 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:47,221 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [729466743] [2024-11-17 08:39:47,221 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [729466743] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:47,221 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:47,221 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-17 08:39:47,221 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1161385114] [2024-11-17 08:39:47,222 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:47,222 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:47,222 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:47,223 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-17 08:39:47,223 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-17 08:39:47,223 INFO L87 Difference]: Start difference. First operand 90169 states and 165851 transitions. cyclomatic complexity: 75683 Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 6 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:51,324 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:51,324 INFO L93 Difference]: Finished difference Result 132493 states and 243086 transitions. [2024-11-17 08:39:51,324 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 132493 states and 243086 transitions. [2024-11-17 08:39:51,786 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 32390 [2024-11-17 08:39:52,627 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 132493 states to 132493 states and 243086 transitions. [2024-11-17 08:39:52,627 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 132493 [2024-11-17 08:39:52,710 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 132493 [2024-11-17 08:39:52,710 INFO L73 IsDeterministic]: Start isDeterministic. Operand 132493 states and 243086 transitions. [2024-11-17 08:39:52,777 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:52,778 INFO L218 hiAutomatonCegarLoop]: Abstraction has 132493 states and 243086 transitions. [2024-11-17 08:39:52,845 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 132493 states and 243086 transitions. [2024-11-17 08:39:53,987 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 132493 to 128015. [2024-11-17 08:39:54,099 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 128015 states, 128015 states have (on average 1.8457212045463423) internal successors, (236280), 128014 states have internal predecessors, (236280), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:54,313 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 128015 states to 128015 states and 236280 transitions. [2024-11-17 08:39:54,313 INFO L240 hiAutomatonCegarLoop]: Abstraction has 128015 states and 236280 transitions. [2024-11-17 08:39:54,313 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-11-17 08:39:54,314 INFO L425 stractBuchiCegarLoop]: Abstraction has 128015 states and 236280 transitions. [2024-11-17 08:39:54,314 INFO L332 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2024-11-17 08:39:54,314 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 128015 states and 236280 transitions. [2024-11-17 08:39:55,281 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 31270 [2024-11-17 08:39:55,281 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:55,281 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:55,284 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:55,285 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:55,286 INFO L745 eck$LassoCheckResult]: Stem: 967258#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 967259#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 966754#L1866 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 966755#L1859 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 962715#L1874 assume true;main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 962716#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 965650#L368 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 963904#L702 assume true;assume { :end_inline_initFloors } true; 963905#L1942 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 964250#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 964251#L479-1 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 964852#L980-1 assume 0 == initPersonOnFloor_~floor#1; 965800#L981-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 962332#L1122-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 967683#L772-1 assume !(0 == callOnFloor_~floorID#1); 966060#L775-1 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 963500#L793-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 966989#L1124-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 967284#L113-1 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 967263#L2102-4 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 962809#L2154-14 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 962810#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 968124#L1377-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 968137#L2119-50 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 963900#L2140-50 assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 963901#L1381-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 968671#L1438-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 968670#L709-109 assume !(0 == isFloorCalling_~floorID#1); 968669#L713-109 assume !(1 == isFloorCalling_~floorID#1); 968668#L717-109 assume !(2 == isFloorCalling_~floorID#1); 968667#L721-109 assume 3 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_3~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 968665#L727-109 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 968664#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 968663#L2119-44 assume !(0 == buttonForFloorIsPressed_~floorID#1); 968659#L2123-44 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 968658#L2140-44 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 968657#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 968656#L2727-4 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 968655#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 968654#L2955-4 assume !(1 == ~doorState~0); 968653#L2961-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 968652#L2306-9 assume !(1 == stopRequestedInDirection_~dir#1); 968651#L2475-9 assume !(0 == ~currentFloorID~0); 968650#L2481-9 assume ~currentFloorID~0 > 0; 968649#L2482-9 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 962707#L709-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 962708#L727-104 assume true;stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 968220#L2486-9 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 966960#L2477-9 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 966961#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 968538#L2682-12 assume !(1 == ~currentHeading~0); 968534#L2692-12 assume !(0 == ~currentFloorID~0); 968529#L2698-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 968526#L2703-12 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 968523#L2985-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 968521#L1446-4 assume !(-1 == ~expectedDirection~0); 968519#L1455-4 assume true; 968517#L1459-4 assume !(1 == ~expectedDirection~0); 968515#L1474-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 968514#L2987-4 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 968513#L2102-3 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 968512#L2154-11 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 968511#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 968509#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 968508#L1384-3 assume true; 968506#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 968505#L1395-3 assume true; 968504#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 968503#L1406-3 assume true; 968501#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 968500#L1417-3 assume true; 968499#L1421-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 968498#L1438-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 968496#L709-88 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 968495#L727-88 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 968494#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 968490#L2119-33 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 968488#L2140-33 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 968485#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 968487#L2727-3 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 968481#L2864-3 assume !(0 != timeShift_~tmp___9~3#1); 968480#L2955-3 assume !(1 == ~doorState~0); 968479#L2961-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 968477#L2306-7 assume !(1 == stopRequestedInDirection_~dir#1); 968478#L2475-7 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 969751#L2477-7 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 969748#L2963-3 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 968469#L2682-9 assume !(1 == ~currentHeading~0); 968470#L2692-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 969711#L2698-9 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 973931#L2703-9 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 973924#L2985-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 973925#L1446-3 assume !(-1 == ~expectedDirection~0); 973916#L1455-3 assume true; 973917#L1459-3 assume !(1 == ~expectedDirection~0); 973904#L1474-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 973905#L2987-3 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 972985#L2102-2 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 972986#L2154-8 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 972852#L1315-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 972853#L1316-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 972278#L1323-2 assume true; 972279#L1327-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 969764#L2119-24 assume !(0 == buttonForFloorIsPressed_~floorID#1); 969723#L2123-24 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 969721#L2140-24 assume true;__utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 969718#L1331-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 969683#L1438-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 969681#L709-67 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 969680#L727-67 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 969678#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 969671#L2119-22 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 969661#L2140-22 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 969662#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 969638#L2727-2 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 969639#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 969612#L2955-2 assume !(1 == ~doorState~0); 969613#L2961-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 969552#L2306-5 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 969553#L1283-14 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 969445#L2310-5 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 969437#L2477-5 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 969418#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 969419#L2682-6 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 963529#L1283-10 assume true;continueInDirection_#t~ret79#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret79#1;havoc continueInDirection_#t~ret79#1; 963530#L2686-6 assume 0 != continueInDirection_~tmp~19#1;~currentHeading~0 := 0; 967630#L2698-6 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 967669#L2703-6 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1010761#L2985-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 1054130#L1446-2 assume !(-1 == ~expectedDirection~0); 1054128#L1455-2 assume true; 1054126#L1459-2 assume !(1 == ~expectedDirection~0); 1054124#L1474-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1054123#L2987-2 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 1054122#L181 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1054120#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1054115#L479 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1054114#L980 assume 0 == initPersonOnFloor_~floor#1; 1054073#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1010706#L1122 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1010707#L772 assume !(0 == callOnFloor_~floorID#1); 1010797#L775 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1010798#L793 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1010792#L1124 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1010793#L113 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1001806#L2102-1 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1001807#L2154-5 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 1000473#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1000474#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 994345#L1384-1 assume true; 994343#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 994342#L1395-1 assume true; 994340#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 994339#L1406-1 assume true; 994337#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 994336#L1417-1 assume true; 994334#L1421-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 994333#L1438-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 994331#L709-46 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 994326#L727-46 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 994321#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 994322#L2119-11 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 994325#L2140-11 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 994323#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 994324#L2727-1 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 994312#L2864-1 assume !(0 != timeShift_~tmp___9~3#1); 994313#L2955-1 assume !(1 == ~doorState~0); 1008806#L2961-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1008805#L2306-3 assume !(1 == stopRequestedInDirection_~dir#1); 1008804#L2475-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1008803#L2477-3 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1008801#L2963-1 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 1008800#L2682-3 assume !(1 == ~currentHeading~0); 1008799#L2692-3 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1001927#L2698-3 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1001919#L2703-3 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1001913#L2985-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 1001914#L1446-1 assume !(-1 == ~expectedDirection~0); 1001906#L1455-1 assume true; 1001898#L1459-1 assume !(1 == ~expectedDirection~0); 1001895#L1474-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1001896#L2987-1 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1031836#L198 [2024-11-17 08:39:55,287 INFO L747 eck$LassoCheckResult]: Loop: 1031836#L198 assume true; 1031835#L198-1 assume !false; 1031834#cleanup_while_0_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1031833#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1031832#L1973 assume true;cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1031831#L206 assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1031830#L709-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1031829#L727-25 assume true;anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 1031823#L2210 assume !(0 != anyStopRequested_~tmp___3~1#1); 1031820#L2214 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1031818#L709-24 assume !(0 == isFloorCalling_~floorID#1); 1031808#L713-24 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1001853#L727-24 assume true;anyStopRequested_#t~ret63#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret63#1;havoc anyStopRequested_#t~ret63#1; 1001854#L2221 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1031332#L2260 assume true;isIdle_#t~ret67#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1031331#L2287 assume true;cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1031330#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1001823#L2102 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1001818#L2154-2 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 1001816#L1315 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 1001815#L1316 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 1001814#L1323 assume true; 1000681#L1327 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1000678#L2119-2 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1000632#L2123-2 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1000619#L2140-2 assume true;__utac_acc__Specification3_spec__1_#t~ret27#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret27#1;havoc __utac_acc__Specification3_spec__1_#t~ret27#1; 1000614#L1331 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1; 995897#L1438 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 995892#L709-20 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 995891#L727-20 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 995890#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 995888#L2119 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 995882#L2140 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 995878#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 995876#L2727 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 995870#L2864 assume !(0 != timeShift_~tmp___9~3#1); 995864#L2955 assume 1 == ~doorState~0;~doorState~0 := 0; 995861#L2961 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 995841#L2306-1 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 995833#L1283-4 assume true;stopRequestedInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~18#1 := stopRequestedInDirection_#t~ret68#1;havoc stopRequestedInDirection_#t~ret68#1; 995818#L2310-1 assume 0 != stopRequestedInDirection_~tmp~18#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 995809#L2477-1 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 995802#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 995803#L2682 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 1048288#L1283 assume true;continueInDirection_#t~ret79#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~19#1 := continueInDirection_#t~ret79#1;havoc continueInDirection_#t~ret79#1; 966945#L2686 assume !(0 != continueInDirection_~tmp~19#1); 966946#L2698 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1005296#L2703 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1005293#L2985 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 1005286#L1446 assume !(-1 == ~expectedDirection~0); 1005282#L1455 assume true; 1005280#L1459 assume !(1 == ~expectedDirection~0); 1005279#L1474 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1031837#L2987 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1031836#L198 [2024-11-17 08:39:55,288 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:55,288 INFO L85 PathProgramCache]: Analyzing trace with hash -1746495241, now seen corresponding path program 1 times [2024-11-17 08:39:55,288 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:55,288 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1971103423] [2024-11-17 08:39:55,288 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:55,289 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:55,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:55,647 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:55,647 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:55,647 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1971103423] [2024-11-17 08:39:55,648 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1971103423] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:55,648 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:55,648 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:55,648 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [676510672] [2024-11-17 08:39:55,648 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:55,649 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:55,649 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:55,649 INFO L85 PathProgramCache]: Analyzing trace with hash 1857896273, now seen corresponding path program 1 times [2024-11-17 08:39:55,649 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:55,650 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [949510306] [2024-11-17 08:39:55,650 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:55,650 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:55,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:55,702 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:55,702 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:55,702 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [949510306] [2024-11-17 08:39:55,703 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [949510306] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:55,703 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:55,703 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:55,703 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1150297422] [2024-11-17 08:39:55,703 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:55,703 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:55,704 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:55,704 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-17 08:39:55,704 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-17 08:39:55,705 INFO L87 Difference]: Start difference. First operand 128015 states and 236280 transitions. cyclomatic complexity: 108266 Second operand has 4 states, 4 states have (on average 13.5) internal successors, (54), 4 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:56,508 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:56,509 INFO L93 Difference]: Finished difference Result 128135 states and 236384 transitions. [2024-11-17 08:39:56,509 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 128135 states and 236384 transitions. [2024-11-17 08:39:57,791 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 31298 [2024-11-17 08:39:58,100 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 128135 states to 128135 states and 236384 transitions. [2024-11-17 08:39:58,100 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 128135 [2024-11-17 08:39:58,179 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 128135 [2024-11-17 08:39:58,179 INFO L73 IsDeterministic]: Start isDeterministic. Operand 128135 states and 236384 transitions. [2024-11-17 08:39:58,249 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:58,249 INFO L218 hiAutomatonCegarLoop]: Abstraction has 128135 states and 236384 transitions. [2024-11-17 08:39:58,311 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 128135 states and 236384 transitions. [2024-11-17 08:39:59,489 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 128135 to 128083. [2024-11-17 08:39:59,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 128083 states, 128083 states have (on average 1.8451472873058876) internal successors, (236332), 128082 states have internal predecessors, (236332), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:59,788 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 128083 states to 128083 states and 236332 transitions. [2024-11-17 08:39:59,788 INFO L240 hiAutomatonCegarLoop]: Abstraction has 128083 states and 236332 transitions. [2024-11-17 08:39:59,788 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-17 08:39:59,789 INFO L425 stractBuchiCegarLoop]: Abstraction has 128083 states and 236332 transitions. [2024-11-17 08:39:59,789 INFO L332 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2024-11-17 08:39:59,789 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 128083 states and 236332 transitions. [2024-11-17 08:40:00,724 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 31286 [2024-11-17 08:40:00,724 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:40:00,724 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:40:00,730 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:40:00,731 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:40:00,731 INFO L745 eck$LassoCheckResult]: Stem: 1223351#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1223352#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1222878#L1866 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1222879#L1859 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 1218871#L1874 assume true;main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1218872#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1221795#L368 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1220057#L702 assume true;assume { :end_inline_initFloors } true; 1220058#L1942 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1220399#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1220400#L479-1 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1221003#L980-1 assume 0 == initPersonOnFloor_~floor#1; 1221952#L981-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1218491#L1122-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1223775#L772-1 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1223094#L793-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1223095#L1124-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1223375#L113-1 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1223356#L2102-4 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1218966#L2154-14 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 1218967#L1315-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1224171#L1377-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1224004#L2119-50 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1220053#L2140-50 assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 1220054#L1381-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 1218337#L1438-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1220082#L709-109 assume !(0 == isFloorCalling_~floorID#1); 1220083#L713-109 assume !(1 == isFloorCalling_~floorID#1); 1223779#L717-109 assume !(2 == isFloorCalling_~floorID#1); 1221672#L721-109 assume 3 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_3~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1221673#L727-109 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 1219122#L2715-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1219123#L2119-44 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1220429#L2123-44 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1219491#L2140-44 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 1218471#L2722-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1218473#L2727-4 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 1224415#L2864-4 assume !(0 != timeShift_~tmp___9~3#1); 1218308#L2955-4 assume !(1 == ~doorState~0); 1218309#L2961-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1219126#L2306-9 assume !(1 == stopRequestedInDirection_~dir#1); 1219127#L2475-9 assume !(0 == ~currentFloorID~0); 1222096#L2481-9 assume ~currentFloorID~0 > 0; 1219192#L2482-9 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1218863#L709-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1218864#L727-104 assume true;stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 1224256#L2486-9 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1224329#L2477-9 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1247420#L2963-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 1247417#L2682-12 assume !(1 == ~currentHeading~0); 1247413#L2692-12 assume !(0 == ~currentFloorID~0); 1247411#L2698-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1247410#L2703-12 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1247407#L2985-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 1247405#L1446-4 assume !(-1 == ~expectedDirection~0); 1247403#L1455-4 assume true; 1247401#L1459-4 assume !(1 == ~expectedDirection~0); 1247394#L1474-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1247393#L2987-4 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1247392#L2102-3 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1247391#L2154-11 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 1247390#L1315-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1247388#L1377-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1247389#L2119-39 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1302705#L2140-39 assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 1302703#L1381-3 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 1302702#L1438-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1302701#L709-88 assume !(0 == isFloorCalling_~floorID#1); 1302696#L713-88 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1302691#L727-88 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 1302689#L2715-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1302690#L2119-33 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1302698#L2123-33 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1302692#L2140-33 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 1302687#L2722-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1302688#L2727-3 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 1302679#L2864-3 assume !(0 != timeShift_~tmp___9~3#1); 1247753#L2955-3 assume !(1 == ~doorState~0); 1247752#L2961-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1247751#L2306-7 assume !(1 == stopRequestedInDirection_~dir#1); 1224538#L2475-7 assume !(0 == ~currentFloorID~0); 1224539#L2481-7 assume ~currentFloorID~0 > 0; 1244681#L2482-7 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1221157#L709-83 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1221158#L727-83 assume true;stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 1224540#L2486-7 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1244682#L2477-7 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1245023#L2963-3 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 1245021#L2682-9 assume !(1 == ~currentHeading~0); 1245016#L2692-9 assume !(0 == ~currentFloorID~0); 1245012#L2698-9 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1244417#L2703-9 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1244412#L2985-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 1244408#L1446-3 assume !(-1 == ~expectedDirection~0); 1244405#L1455-3 assume true; 1244406#L1459-3 assume !(1 == ~expectedDirection~0); 1296718#L1474-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1296716#L2987-3 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1296714#L2102-2 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1296712#L2154-8 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 1296710#L1315-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1296707#L1377-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1296703#L2119-28 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1296701#L2140-28 assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 1296699#L1381-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 1296700#L1438-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1311478#L709-67 assume !(0 == isFloorCalling_~floorID#1); 1295940#L713-67 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1295942#L727-67 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 1306278#L2715-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1306277#L2119-22 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1306164#L2123-22 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1306162#L2140-22 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 1306159#L2722-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1306158#L2727-2 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 1306157#L2864-2 assume !(0 != timeShift_~tmp___9~3#1); 1239860#L2955-2 assume !(1 == ~doorState~0); 1239859#L2961-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1239858#L2306-5 assume !(1 == stopRequestedInDirection_~dir#1); 1239857#L2475-5 assume !(0 == ~currentFloorID~0); 1224427#L2481-5 assume ~currentFloorID~0 > 0; 1224425#L2482-5 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1224426#L709-62 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1239846#L727-62 assume true;stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 1224424#L2486-5 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1219948#L2477-5 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1224577#L2963-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 1219196#L2682-6 assume !(1 == ~currentHeading~0); 1219197#L2692-6 assume !(0 == ~currentFloorID~0); 1223726#L2698-6 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1243918#L2703-6 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1243917#L2985-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 1343813#L1446-2 assume !(-1 == ~expectedDirection~0); 1343811#L1455-2 assume true; 1343809#L1459-2 assume !(1 == ~expectedDirection~0); 1343807#L1474-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1343806#L2987-2 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true; 1343805#L181 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1242934#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1242929#L479 assume true;bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1242925#L980 assume 0 == initPersonOnFloor_~floor#1; 1239661#L981 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1239629#L1122 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1239225#L772 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1239214#L793 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1239204#L1124 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1239197#L113 assume true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1239189#L2102-1 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1239184#L2154-5 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 1239049#L1315-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1237300#L1377-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1237301#L2119-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1332028#L2140-17 assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 1332025#L1381-1 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 1332026#L1438-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1332525#L709-46 assume !(0 == isFloorCalling_~floorID#1); 1332521#L713-46 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1332516#L727-46 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 1332512#L2715-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1332513#L2119-11 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1332519#L2123-11 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1332515#L2140-11 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 1332514#L2722-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1332511#L2727-1 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 1332508#L2864-1 assume !(0 != timeShift_~tmp___9~3#1); 1235867#L2955-1 assume !(1 == ~doorState~0); 1235866#L2961-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1235865#L2306-3 assume !(1 == stopRequestedInDirection_~dir#1); 1235602#L2475-3 assume !(0 == ~currentFloorID~0); 1221901#L2481-3 assume ~currentFloorID~0 > 0; 1221902#L2482-3 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1224400#L709-41 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1224464#L727-41 assume true;stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 1218721#L2486-3 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1218665#L2477-3 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1224662#L2963-1 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 1223560#L2682-3 assume !(1 == ~currentHeading~0); 1218112#L2692-3 assume !(0 == ~currentFloorID~0); 1218113#L2698-3 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1248167#L2703-3 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1248165#L2985-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 1344994#L1446-1 assume !(-1 == ~expectedDirection~0); 1344992#L1455-1 assume true; 1344989#L1459-1 assume !(1 == ~expectedDirection~0); 1344988#L1474-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1239670#L2987-1 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1239631#L198 [2024-11-17 08:40:00,736 INFO L747 eck$LassoCheckResult]: Loop: 1239631#L198 assume true; 1239454#L198-1 assume !false; 1239450#cleanup_while_0_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1239447#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1239438#L1973 assume true;cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1239439#L206 assume 1 != cleanup_~tmp___0~0#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1327267#L709-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1327265#L727-25 assume true;anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 1239230#L2210 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1231528#L2260 assume true;isIdle_#t~ret67#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1239215#L2287 assume true;cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1327257#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~4#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~1#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1327255#L2102 assume true;__utac_acc__Specification3_spec__1_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~11#1 := __utac_acc__Specification3_spec__1_#t~ret24#1;havoc __utac_acc__Specification3_spec__1_#t~ret24#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~11#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1327253#L2154-2 assume true;__utac_acc__Specification3_spec__1_#t~ret25#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret25#1;havoc __utac_acc__Specification3_spec__1_#t~ret25#1; 1327251#L1315 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1327247#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1327243#L2119-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1327241#L2140-6 assume true;__utac_acc__Specification3_spec__1_#t~ret31#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret31#1;havoc __utac_acc__Specification3_spec__1_#t~ret31#1; 1327239#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 1327238#L1438 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret24#1, __utac_acc__Specification3_spec__1_#t~ret25#1, __utac_acc__Specification3_spec__1_#t~ret26#1, __utac_acc__Specification3_spec__1_#t~ret27#1, __utac_acc__Specification3_spec__1_#t~ret28#1, __utac_acc__Specification3_spec__1_#t~ret29#1, __utac_acc__Specification3_spec__1_#t~ret30#1, __utac_acc__Specification3_spec__1_#t~ret31#1, __utac_acc__Specification3_spec__1_#t~ret32#1, __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~11#1, __utac_acc__Specification3_spec__1_~tmp___0~4#1, __utac_acc__Specification3_spec__1_~tmp___1~3#1, __utac_acc__Specification3_spec__1_~tmp___2~1#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1327237#L709-20 assume !(0 == isFloorCalling_~floorID#1); 1327234#L713-20 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1327228#L727-20 assume true;stopRequestedAtCurrentFloor_#t~ret80#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 1327223#L2715 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1327224#L2119 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1327229#L2123 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1327227#L2140 assume true;stopRequestedAtCurrentFloor_#t~ret81#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 1327225#L2722 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 1327226#L2727 assume true;timeShift_#t~ret94#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 1327215#L2864 assume !(0 != timeShift_~tmp___9~3#1); 1224660#L2955 assume 1 == ~doorState~0;~doorState~0 := 0; 1224410#L2961 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~18#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~1#1;havoc stopRequestedInDirection_~tmp___6~1#1;havoc stopRequestedInDirection_~tmp___7~1#1;havoc stopRequestedInDirection_~tmp___8~1#1;havoc stopRequestedInDirection_~tmp___9~1#1; 1223018#L2306-1 assume !(1 == stopRequestedInDirection_~dir#1); 1222913#L2475-1 assume !(0 == ~currentFloorID~0); 1222914#L2481-1 assume ~currentFloorID~0 > 0; 1224561#L2482-1 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1224562#L709-15 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1224569#L727-15 assume true;stopRequestedInDirection_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~1#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 1224564#L2486-1 assume 0 != stopRequestedInDirection_~tmp___9~1#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1224565#L2477-1 assume true;timeShift_#t~ret101#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_#t~ret77#1, stopRequestedInDirection_#t~ret78#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~18#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~1#1, stopRequestedInDirection_~tmp___6~1#1, stopRequestedInDirection_~tmp___7~1#1, stopRequestedInDirection_~tmp___8~1#1, stopRequestedInDirection_~tmp___9~1#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1243782#L2963 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~19#1;~currentHeading~0 := continueInDirection_~dir#1; 1243781#L2682 assume !(1 == ~currentHeading~0); 1243780#L2692 assume !(0 == ~currentFloorID~0); 1243777#L2698 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1243776#L2703 assume true;havoc continueInDirection_#t~ret79#1, continueInDirection_~dir#1, continueInDirection_~tmp~19#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1243774#L2985 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;havoc __utac_acc__Specification3_spec__2_~tmp~12#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~5#1; 1345880#L1446 assume !(-1 == ~expectedDirection~0); 1344996#L1455 assume true; 1243761#L1459 assume !(1 == ~expectedDirection~0); 1243626#L1474 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret36#1, __utac_acc__Specification3_spec__2_#t~ret37#1, __utac_acc__Specification3_spec__2_~tmp~12#1, __utac_acc__Specification3_spec__2_~tmp___0~5#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1239669#L2987 assume true;havoc timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_~tmp~22#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1239631#L198 [2024-11-17 08:40:00,737 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:40:00,737 INFO L85 PathProgramCache]: Analyzing trace with hash -1490509150, now seen corresponding path program 1 times [2024-11-17 08:40:00,737 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:40:00,737 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1282191004] [2024-11-17 08:40:00,737 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:40:00,745 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:40:00,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:40:00,951 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:40:00,955 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:40:00,955 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1282191004] [2024-11-17 08:40:00,956 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1282191004] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:40:00,956 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:40:00,956 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:40:00,956 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1184834684] [2024-11-17 08:40:00,956 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:40:00,957 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:40:00,958 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:40:00,958 INFO L85 PathProgramCache]: Analyzing trace with hash -605695966, now seen corresponding path program 1 times [2024-11-17 08:40:00,958 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:40:00,958 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [570678350] [2024-11-17 08:40:00,958 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:40:00,958 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:40:00,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:40:01,008 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:40:01,008 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:40:01,008 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [570678350] [2024-11-17 08:40:01,008 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [570678350] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:40:01,008 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:40:01,008 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-17 08:40:01,008 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [672810184] [2024-11-17 08:40:01,009 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:40:01,009 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:40:01,009 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:40:01,009 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-17 08:40:01,009 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-17 08:40:01,009 INFO L87 Difference]: Start difference. First operand 128083 states and 236332 transitions. cyclomatic complexity: 108250 Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:40:01,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:40:01,618 INFO L93 Difference]: Finished difference Result 171403 states and 315536 transitions. [2024-11-17 08:40:01,618 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 171403 states and 315536 transitions. [2024-11-17 08:40:03,131 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 42106