./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec3_product09.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 3289d67d Calling Ultimate with: /root/.sdkman/candidates/java/11.0.12-open/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec3_product09.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 67b10dcf95f436cfd8f02a55d7d1d272656f1382a4eb6ab4ad3bba992e95e024 --- Real Ultimate output --- This is Ultimate 0.2.5-tmp.fs.icfgbuilder-eval-3289d67-m [2024-11-17 08:38:55,400 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-17 08:38:55,458 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2024-11-17 08:38:55,462 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-17 08:38:55,463 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-17 08:38:55,463 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder.Remove goto edges from RCFG [2024-11-17 08:38:55,490 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-17 08:38:55,490 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-17 08:38:55,490 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-17 08:38:55,491 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-17 08:38:55,491 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-17 08:38:55,491 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-17 08:38:55,492 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-17 08:38:55,492 INFO L153 SettingsManager]: * Use SBE=true [2024-11-17 08:38:55,492 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2024-11-17 08:38:55,492 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2024-11-17 08:38:55,492 INFO L153 SettingsManager]: * Use old map elimination=false [2024-11-17 08:38:55,493 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2024-11-17 08:38:55,493 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2024-11-17 08:38:55,495 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2024-11-17 08:38:55,496 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-17 08:38:55,496 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2024-11-17 08:38:55,496 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-17 08:38:55,497 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-17 08:38:55,497 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-17 08:38:55,497 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-17 08:38:55,497 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2024-11-17 08:38:55,497 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2024-11-17 08:38:55,498 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2024-11-17 08:38:55,498 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-17 08:38:55,498 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2024-11-17 08:38:55,498 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-17 08:38:55,498 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-17 08:38:55,498 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2024-11-17 08:38:55,499 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-17 08:38:55,499 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2024-11-17 08:38:55,499 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-17 08:38:55,499 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-17 08:38:55,500 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-17 08:38:55,500 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2024-11-17 08:38:55,500 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 67b10dcf95f436cfd8f02a55d7d1d272656f1382a4eb6ab4ad3bba992e95e024 [2024-11-17 08:38:55,703 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-17 08:38:55,725 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-17 08:38:55,727 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-17 08:38:55,728 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-17 08:38:55,728 INFO L274 PluginConnector]: CDTParser initialized [2024-11-17 08:38:55,730 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec3_product09.cil.c [2024-11-17 08:38:56,986 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-17 08:38:57,218 INFO L384 CDTParser]: Found 1 translation units. [2024-11-17 08:38:57,220 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec3_product09.cil.c [2024-11-17 08:38:57,238 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a1df5d3de/90c19bd8e5594f33b386ec634aba8d18/FLAG20f2463e9 [2024-11-17 08:38:57,541 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a1df5d3de/90c19bd8e5594f33b386ec634aba8d18 [2024-11-17 08:38:57,543 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-17 08:38:57,545 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-17 08:38:57,546 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-17 08:38:57,546 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-17 08:38:57,550 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-17 08:38:57,551 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 08:38:57" (1/1) ... [2024-11-17 08:38:57,552 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@78a80dc6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:57, skipping insertion in model container [2024-11-17 08:38:57,552 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 08:38:57" (1/1) ... [2024-11-17 08:38:57,604 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-17 08:38:58,077 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-17 08:38:58,095 INFO L200 MainTranslator]: Completed pre-run [2024-11-17 08:38:58,103 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [48] [2024-11-17 08:38:58,105 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [147] [2024-11-17 08:38:58,105 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [165] [2024-11-17 08:38:58,105 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [832] [2024-11-17 08:38:58,106 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [952] [2024-11-17 08:38:58,107 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [961] [2024-11-17 08:38:58,107 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [2404] [2024-11-17 08:38:58,107 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [2442] [2024-11-17 08:38:58,107 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [2790] [2024-11-17 08:38:58,107 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [2976] [2024-11-17 08:38:58,205 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-17 08:38:58,232 INFO L204 MainTranslator]: Completed translation [2024-11-17 08:38:58,233 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:58 WrapperNode [2024-11-17 08:38:58,233 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-17 08:38:58,234 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-17 08:38:58,234 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-17 08:38:58,234 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-17 08:38:58,240 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:58" (1/1) ... [2024-11-17 08:38:58,269 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:58" (1/1) ... [2024-11-17 08:38:58,504 INFO L138 Inliner]: procedures = 87, calls = 337, calls flagged for inlining = 190, calls inlined = 623, statements flattened = 20585 [2024-11-17 08:38:58,505 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-17 08:38:58,505 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-17 08:38:58,505 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-17 08:38:58,505 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-17 08:38:58,514 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:58" (1/1) ... [2024-11-17 08:38:58,515 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:58" (1/1) ... [2024-11-17 08:38:58,552 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:58" (1/1) ... [2024-11-17 08:38:58,624 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4, 4, 4, 4, 2]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4, 4, 4, 4, 2]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2024-11-17 08:38:58,625 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:58" (1/1) ... [2024-11-17 08:38:58,625 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:58" (1/1) ... [2024-11-17 08:38:58,760 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:58" (1/1) ... [2024-11-17 08:38:58,788 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:58" (1/1) ... [2024-11-17 08:38:58,815 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:58" (1/1) ... [2024-11-17 08:38:58,834 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:58" (1/1) ... [2024-11-17 08:38:58,877 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-17 08:38:58,878 INFO L112 PluginConnector]: ------------------------IcfgBuilder---------------------------- [2024-11-17 08:38:58,879 INFO L270 PluginConnector]: Initializing IcfgBuilder... [2024-11-17 08:38:58,879 INFO L274 PluginConnector]: IcfgBuilder initialized [2024-11-17 08:38:58,880 INFO L184 PluginConnector]: Executing the observer IcfgBuilderObserver from plugin IcfgBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:58" (1/1) ... [2024-11-17 08:38:58,885 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-17 08:38:58,895 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-17 08:38:58,914 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-17 08:38:58,924 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2024-11-17 08:38:58,979 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-17 08:38:58,980 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-17 08:38:58,981 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-11-17 08:38:58,981 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-11-17 08:38:58,981 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-11-17 08:38:58,981 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-11-17 08:38:58,982 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-11-17 08:38:58,982 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2024-11-17 08:38:58,982 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2024-11-17 08:38:58,982 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2024-11-17 08:38:58,982 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2024-11-17 08:38:58,982 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2024-11-17 08:38:58,982 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2024-11-17 08:38:58,982 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2024-11-17 08:38:58,983 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2024-11-17 08:38:58,983 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2024-11-17 08:38:58,983 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2024-11-17 08:38:58,983 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2024-11-17 08:38:58,983 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2024-11-17 08:38:58,983 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2024-11-17 08:38:58,984 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2024-11-17 08:38:58,984 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-17 08:38:58,984 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-17 08:38:59,232 INFO L256 CfgBuilder]: Building ICFG [2024-11-17 08:38:59,233 INFO L286 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-17 08:39:06,343 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1036-1: isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; [2024-11-17 08:39:06,344 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-1: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,344 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-3: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,344 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-5: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,344 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-7: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,344 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-9: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,344 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-11: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,344 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-13: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,344 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-15: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,344 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-17: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,345 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-19: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,345 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-21: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,345 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-23: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,345 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-25: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,345 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-27: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,345 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-29: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,345 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-31: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,345 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-33: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,345 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-35: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,346 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-37: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,346 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-39: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,346 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-41: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,346 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-43: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,346 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-45: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,346 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-47: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,346 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-49: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,346 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-51: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,346 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-53: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,346 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-55: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,347 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-57: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,347 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L518-59: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~1#1; [2024-11-17 08:39:06,347 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1185-1: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; [2024-11-17 08:39:06,347 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1185-3: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; [2024-11-17 08:39:06,347 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1185-5: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; [2024-11-17 08:39:06,347 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1185-7: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; [2024-11-17 08:39:06,348 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1185-9: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; [2024-11-17 08:39:06,348 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1722-1: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; [2024-11-17 08:39:06,348 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1722-3: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; [2024-11-17 08:39:06,348 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1722-5: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; [2024-11-17 08:39:06,348 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1722-7: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; [2024-11-17 08:39:06,348 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1722-9: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; [2024-11-17 08:39:06,348 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1722-11: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; [2024-11-17 08:39:06,348 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1722-13: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; [2024-11-17 08:39:06,348 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1722-15: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; [2024-11-17 08:39:06,348 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1722-17: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; [2024-11-17 08:39:06,349 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1722-19: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; [2024-11-17 08:39:06,349 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2787-1: main_#res#1 := main_~retValue_acc~22#1; [2024-11-17 08:39:06,349 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-1: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,349 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-3: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,349 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-5: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,349 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-7: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,349 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-9: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,349 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-11: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,350 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-13: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,350 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-15: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,350 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-17: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,350 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-19: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,350 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-21: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,350 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-23: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,350 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-25: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,350 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-27: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,350 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-29: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,350 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-31: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,351 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-33: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,351 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-35: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,351 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-37: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,351 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-39: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,351 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-41: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,351 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-43: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,351 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-45: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,351 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-47: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,351 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-49: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,351 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-51: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,351 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-53: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,352 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-55: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,352 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-57: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,352 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-59: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,352 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-61: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,352 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-63: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,352 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-65: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,352 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-67: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,352 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-69: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,352 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-71: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,352 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-73: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,352 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-75: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,352 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-77: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,352 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-79: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,352 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-81: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,352 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-83: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,353 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-85: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,353 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-87: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,353 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-89: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,353 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-91: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,353 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-93: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,353 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-95: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,353 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-97: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,353 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-99: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,353 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-101: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,353 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-103: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,353 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-105: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,353 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-107: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,353 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1228-109: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; [2024-11-17 08:39:06,353 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1237-1: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; [2024-11-17 08:39:06,353 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1237-3: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; [2024-11-17 08:39:06,354 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1237-5: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; [2024-11-17 08:39:06,354 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1237-7: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; [2024-11-17 08:39:06,354 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1237-9: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; [2024-11-17 08:39:06,354 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1237-11: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; [2024-11-17 08:39:06,354 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1237-13: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; [2024-11-17 08:39:06,354 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1237-15: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; [2024-11-17 08:39:06,354 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1237-17: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; [2024-11-17 08:39:06,354 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1237-19: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; [2024-11-17 08:39:06,354 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1237-21: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; [2024-11-17 08:39:06,354 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1237-23: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; [2024-11-17 08:39:06,354 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1237-25: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; [2024-11-17 08:39:06,354 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1237-27: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; [2024-11-17 08:39:06,354 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1237-29: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; [2024-11-17 08:39:06,355 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-1: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,355 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-3: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,355 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-5: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,355 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-7: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,355 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-9: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,355 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-11: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,356 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-13: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,356 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-15: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,356 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-17: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,356 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-19: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,356 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-21: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,356 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-23: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,356 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-25: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,356 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-27: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,357 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-29: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,357 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-31: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,357 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-33: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,357 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-35: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,357 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-37: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,357 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-39: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,357 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-41: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,357 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-43: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,357 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-45: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,357 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-47: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,357 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-49: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,358 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-51: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,358 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-53: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,358 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-55: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,358 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-57: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,358 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1277-59: isEmpty_#res#1 := isEmpty_~retValue_acc~11#1; [2024-11-17 08:39:06,358 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1812-1: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; [2024-11-17 08:39:06,358 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1812-3: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; [2024-11-17 08:39:06,358 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1812-5: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; [2024-11-17 08:39:06,358 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1812-7: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; [2024-11-17 08:39:06,358 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1812-9: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; [2024-11-17 08:39:06,359 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1826-1: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,359 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1826-3: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,359 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1826-5: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,359 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1826-7: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,359 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1826-9: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,359 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1826-11: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,359 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1826-13: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,359 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1826-15: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,359 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1826-17: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,359 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1826-19: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~17#1; [2024-11-17 08:39:06,360 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-1: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,360 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-3: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,360 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-5: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,360 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-7: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,360 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-9: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,360 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-11: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,361 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-13: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,361 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-15: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,361 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-17: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,361 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-19: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,361 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-21: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,361 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-23: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,361 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-25: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,361 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-27: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,361 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-29: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,361 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-31: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,362 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-33: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,362 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-35: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,362 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-37: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,362 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-39: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,362 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-41: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,362 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-43: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,362 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-45: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,362 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-47: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,363 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-49: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,363 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-51: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,363 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-53: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,363 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-55: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,363 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-57: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,363 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-59: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,363 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-61: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,363 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-63: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,363 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-65: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,363 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-67: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,363 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-69: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,364 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-71: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,364 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-73: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,364 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-75: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,364 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-77: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,364 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-79: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,364 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-81: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,364 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-83: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,364 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-85: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,364 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-87: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,364 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-89: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,364 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-91: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,365 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-93: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,365 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-95: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,365 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-97: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,365 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-99: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,365 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-101: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,365 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-103: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,365 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-105: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,365 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-107: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,365 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-109: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,365 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-111: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,366 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-113: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,366 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-115: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,366 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-117: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,366 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-119: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,366 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-121: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,366 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-123: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,366 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-125: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,366 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-127: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,366 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-129: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,366 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-131: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,366 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-133: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,367 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-135: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,367 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-137: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,367 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-139: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,367 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-141: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,367 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-143: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,367 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-145: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,367 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-147: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,367 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-149: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,367 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-151: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,367 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-153: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,367 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-155: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,367 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-157: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,367 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-159: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,367 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-161: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,367 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-163: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,367 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-165: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,368 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-167: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,368 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-169: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,368 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-171: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,368 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-173: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,368 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-175: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,368 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-177: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,368 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-179: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,368 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-181: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,368 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-183: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,368 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-185: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,368 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-187: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,369 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-189: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,369 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-191: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,369 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-193: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,369 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-195: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,369 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-197: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,369 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-199: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,369 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-201: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,369 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-203: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,369 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-205: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,369 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-207: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,369 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-209: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,370 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-211: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,370 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-213: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,370 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-215: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,370 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-217: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,370 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L282-219: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; [2024-11-17 08:39:06,370 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1357-1: anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; [2024-11-17 08:39:06,370 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-1: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,370 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-3: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,370 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-5: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,371 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-7: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,371 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-9: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,371 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-11: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,371 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-13: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,371 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-15: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,371 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-17: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,371 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-19: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,371 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-21: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,371 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-23: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,371 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-25: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,372 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-27: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,372 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-29: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,372 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-31: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,372 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-33: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,372 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-35: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,372 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-37: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,372 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-39: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,372 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-41: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,372 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-43: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,372 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-45: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,372 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-47: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,372 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L829-49: isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; [2024-11-17 08:39:06,372 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L1370-1: isIdle_#res#1 := isIdle_~retValue_acc~13#1; [2024-11-17 08:39:06,372 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L2439-1: valid_product_#res#1 := valid_product_~retValue_acc~20#1; [2024-11-17 08:39:06,373 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L910-1: getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; [2024-11-17 08:39:06,373 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L910-3: getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; [2024-11-17 08:39:06,373 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-1: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,373 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-3: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,373 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-5: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,374 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-7: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,374 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-9: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,374 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-11: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,374 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-13: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,374 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-15: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,374 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-17: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,374 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-19: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,374 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-21: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,374 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-23: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,374 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-25: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,374 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-27: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,375 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-29: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,375 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-31: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,375 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-33: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,375 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-35: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,375 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-37: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,375 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-39: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,375 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-41: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,375 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-43: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,375 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-45: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,375 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-47: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,375 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-49: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,376 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-51: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,376 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-53: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,376 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-55: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,376 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-57: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,376 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-59: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,376 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-61: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,376 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-63: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,376 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-65: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,376 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-67: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,376 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-69: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,377 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-71: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,377 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-73: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,377 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-75: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,377 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-77: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,377 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-79: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,377 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-81: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,377 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-83: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,377 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-85: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,377 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-87: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,377 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-89: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,377 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-91: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,377 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-93: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,377 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-95: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,377 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-97: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,377 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-99: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,378 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-101: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,378 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-103: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,378 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-105: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,378 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-107: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,378 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-109: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,378 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-111: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,378 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-113: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,378 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-115: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,378 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-117: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:06,378 INFO L1250 $ProcedureCfgBuilder]: dead code at ProgramPoint L949-119: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2024-11-17 08:39:07,579 INFO L? ?]: Removed 9450 outVars from TransFormulas that were not future-live. [2024-11-17 08:39:07,579 INFO L307 CfgBuilder]: Performing block encoding [2024-11-17 08:39:07,679 INFO L331 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-17 08:39:07,680 INFO L336 CfgBuilder]: Removed 0 assume(true) statements. [2024-11-17 08:39:07,680 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 17.11 08:39:07 BoogieIcfgContainer [2024-11-17 08:39:07,680 INFO L131 PluginConnector]: ------------------------ END IcfgBuilder---------------------------- [2024-11-17 08:39:07,682 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2024-11-17 08:39:07,682 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2024-11-17 08:39:07,685 INFO L274 PluginConnector]: BuchiAutomizer initialized [2024-11-17 08:39:07,686 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-17 08:39:07,686 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 17.11 08:38:57" (1/3) ... [2024-11-17 08:39:07,687 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5c7c4e98 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 17.11 08:39:07, skipping insertion in model container [2024-11-17 08:39:07,690 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-17 08:39:07,690 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 08:38:58" (2/3) ... [2024-11-17 08:39:07,690 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5c7c4e98 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 17.11 08:39:07, skipping insertion in model container [2024-11-17 08:39:07,690 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-17 08:39:07,690 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 17.11 08:39:07" (3/3) ... [2024-11-17 08:39:07,691 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product09.cil.c [2024-11-17 08:39:07,804 INFO L300 stractBuchiCegarLoop]: Interprodecural is true [2024-11-17 08:39:07,804 INFO L301 stractBuchiCegarLoop]: Hoare is None [2024-11-17 08:39:07,809 INFO L302 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2024-11-17 08:39:07,809 INFO L303 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2024-11-17 08:39:07,809 INFO L304 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2024-11-17 08:39:07,809 INFO L305 stractBuchiCegarLoop]: Difference is false [2024-11-17 08:39:07,809 INFO L306 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2024-11-17 08:39:07,810 INFO L310 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2024-11-17 08:39:07,828 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6229 states, 6228 states have (on average 1.844251766217084) internal successors, (11486), 6228 states have internal predecessors, (11486), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:07,952 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1261 [2024-11-17 08:39:07,952 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:07,952 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:07,970 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:07,970 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:07,970 INFO L332 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2024-11-17 08:39:07,983 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6229 states, 6228 states have (on average 1.844251766217084) internal successors, (11486), 6228 states have internal predecessors, (11486), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:08,041 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1261 [2024-11-17 08:39:08,041 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:08,041 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:08,045 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:08,045 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:08,052 INFO L745 eck$LassoCheckResult]: Stem: 5125#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 5523#ULTIMATE.init_returnLabel#1true assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 624#L2430true assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 3317#L2423true assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 4316#L2438true assume true;main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 3662#L2777true assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 1642#L2754true assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 910#L247true assume true;assume { :end_inline_initFloors } true; 1143#L1004true assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 6109#L878-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 1619#L903-1true assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5888#L525-1true assume 0 == initPersonOnFloor_~floor#1; 3049#L526-1true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 4901#L667-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 4829#L317-1true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 74#L338-1true assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 4764#L669-1true assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 2533#L2504-1true assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 2494#L1184-4true assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1514#L1236-14true assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 5891#L2814-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 4333#L2815-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1539#L1201-45true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1906#L1222-45true assume true;__utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 5620#L2819-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 3072#L2937-4true assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 4888#L254-109true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 238#L272-109true assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 2117#L1797-4true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 3327#L1809-4true assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 5926#L1948-4true assume !(0 != timeShift_~tmp___9~2#1); 6096#L2039-4true assume !(1 == ~doorState~0); 4381#L2045-4true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 5455#L1388-9true assume !(1 == stopRequestedInDirection_~dir#1); 5170#L1557-9true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 5765#L1559-9true assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 5924#L2047-4true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 5542#L1764-12true assume !(1 == ~currentHeading~0); 5733#L1774-12true assume !(0 == ~currentFloorID~0); 5592#L1780-12true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1835#L1785-12true assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 3495#L2069-4true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 2690#L2945-4true assume !(-1 == ~expectedDirection~0); 5393#L2954-4true assume true; 650#L2958-4true assume !(1 == ~expectedDirection~0); 3776#L2973-4true assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 5222#L2071-4true assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 5973#L1184-3true assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 890#L1236-11true assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 3498#L2814-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 322#L2815-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 3419#L1201-34true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1767#L1222-34true assume true;__utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 2754#L2819-3true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 159#L2937-3true assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 4412#L254-88true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 5899#L272-88true assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 448#L1797-3true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 889#L1809-3true assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 720#L1948-3true assume !(0 != timeShift_~tmp___9~2#1); 2186#L2039-3true assume !(1 == ~doorState~0); 2214#L2045-3true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2033#L1388-7true assume !(1 == stopRequestedInDirection_~dir#1); 3529#L1557-7true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1900#L1559-7true assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1587#L2047-3true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 4632#L1764-9true assume !(1 == ~currentHeading~0); 3010#L1774-9true assume !(0 == ~currentFloorID~0); 3839#L1780-9true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5855#L1785-9true assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 4661#L2069-3true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 445#L2945-3true assume !(-1 == ~expectedDirection~0); 1502#L2954-3true assume true; 4235#L2958-3true assume !(1 == ~expectedDirection~0); 3861#L2973-3true assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1296#L2071-3true assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1147#L1184-2true assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1847#L1236-8true assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 3751#L2814-2true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 1694#L2815-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 820#L1201-23true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 867#L1222-23true assume true;__utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 688#L2819-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 4263#L2937-2true assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 3546#L254-67true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2152#L272-67true assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 2804#L1797-2true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 5766#L1809-2true assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 5436#L1948-2true assume !(0 != timeShift_~tmp___9~2#1); 3166#L2039-2true assume !(1 == ~doorState~0); 2345#L2045-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 4380#L1388-5true assume !(1 == stopRequestedInDirection_~dir#1); 6077#L1557-5true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 933#L1559-5true assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 452#L2047-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2789#L1764-6true assume !(1 == ~currentHeading~0); 4391#L1774-6true assume !(0 == ~currentFloorID~0); 2945#L1780-6true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3713#L1785-6true assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 4708#L2069-2true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 5661#L2945-2true assume !(-1 == ~expectedDirection~0); 463#L2954-2true assume true; 1959#L2958-2true assume !(1 == ~expectedDirection~0); 1936#L2973-2true assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 658#L2071-2true assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 536#L2571true assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 4853#L878true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 4902#L903true assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2622#L525true assume 0 == initPersonOnFloor_~floor#1; 2590#L526true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 3299#L667true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 3697#L317true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 3823#L338true assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 3859#L669true assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 2885#L2504true assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 4826#L1184-1true assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 2276#L1236-5true assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 5890#L2814-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 3202#L2815-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 5904#L1201-12true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1729#L1222-12true assume true;__utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 1955#L2819-1true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 2965#L2937-1true assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 5678#L254-46true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 4844#L272-46true assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 2846#L1797-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1275#L1809-1true assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1782#L1948-1true assume !(0 != timeShift_~tmp___9~2#1); 1513#L2039-1true assume !(1 == ~doorState~0); 5196#L2045-1true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2540#L1388-3true assume !(1 == stopRequestedInDirection_~dir#1); 1135#L1557-3true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 137#L1559-3true assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1330#L2047-1true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2649#L1764-3true assume !(1 == ~currentHeading~0); 3544#L1774-3true assume !(0 == ~currentFloorID~0); 1682#L1780-3true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3860#L1785-3true assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 2401#L2069-1true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1545#L2945-1true assume !(-1 == ~expectedDirection~0); 4351#L2954-1true assume true; 5838#L2958-1true assume !(1 == ~expectedDirection~0); 5940#L2973-1true assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 6008#L2071-1true assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 5016#L2586true [2024-11-17 08:39:08,054 INFO L747 eck$LassoCheckResult]: Loop: 5016#L2586true assume true; 2605#L2586-1true assume !false; 5131#cleanup_while_5_continue#1true assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 306#L2590true assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 236#L1035true assume true;cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 4250#L2594true assume 1 != cleanup_~tmp___0~8#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 2088#L254-25true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 2877#L272-25true assume true;anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 5808#L1292true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1735#L1342true assume true;isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 3825#L1369true assume true;cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 4754#L2606true assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 565#L1184true assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 4689#L1236-2true assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 4909#L2814true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 799#L2815true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 2973#L1201-1true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 6230#L1222-1true assume true;__utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 292#L2819true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 258#L2937true assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 2461#L254-20true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1681#L272-20true assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 76#L1797true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 4161#L1809true assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 2304#L1948true assume !(0 != timeShift_~tmp___9~2#1); 4848#L2039true assume 1 == ~doorState~0;~doorState~0 := 0; 2468#L2045true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 955#L1388-1true assume !(1 == stopRequestedInDirection_~dir#1); 4778#L1557-1true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 5916#L1559-1true assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 3416#L2047true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 861#L1764true assume !(1 == ~currentHeading~0); 2753#L1774true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2584#L1780true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 585#L1785true assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 5290#L2069true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 4017#L2945true assume !(-1 == ~expectedDirection~0); 5666#L2954true assume true; 3153#L2958true assume !(1 == ~expectedDirection~0); 1998#L2973true assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 681#L2071true assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 5016#L2586true [2024-11-17 08:39:08,063 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:08,063 INFO L85 PathProgramCache]: Analyzing trace with hash -568577075, now seen corresponding path program 1 times [2024-11-17 08:39:08,070 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:08,071 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1895283866] [2024-11-17 08:39:08,071 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:08,071 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:08,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:08,571 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:08,572 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:08,572 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1895283866] [2024-11-17 08:39:08,572 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1895283866] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:08,572 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:08,573 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:08,574 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [213830046] [2024-11-17 08:39:08,575 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:08,579 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:08,581 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:08,581 INFO L85 PathProgramCache]: Analyzing trace with hash -1620432041, now seen corresponding path program 1 times [2024-11-17 08:39:08,581 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:08,581 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1318241259] [2024-11-17 08:39:08,581 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:08,581 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:08,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:08,687 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:08,688 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:08,688 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1318241259] [2024-11-17 08:39:08,688 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1318241259] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:08,688 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:08,688 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-17 08:39:08,688 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [110052447] [2024-11-17 08:39:08,688 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:08,689 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:08,690 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:08,714 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-17 08:39:08,714 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-17 08:39:08,728 INFO L87 Difference]: Start difference. First operand has 6229 states, 6228 states have (on average 1.844251766217084) internal successors, (11486), 6228 states have internal predecessors, (11486), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 6 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:12,674 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:12,675 INFO L93 Difference]: Finished difference Result 10359 states and 18975 transitions. [2024-11-17 08:39:12,676 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 10359 states and 18975 transitions. [2024-11-17 08:39:12,806 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2309 [2024-11-17 08:39:12,856 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 10359 states to 10323 states and 18934 transitions. [2024-11-17 08:39:12,857 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 10323 [2024-11-17 08:39:12,867 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 10323 [2024-11-17 08:39:12,868 INFO L73 IsDeterministic]: Start isDeterministic. Operand 10323 states and 18934 transitions. [2024-11-17 08:39:12,887 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:12,887 INFO L218 hiAutomatonCegarLoop]: Abstraction has 10323 states and 18934 transitions. [2024-11-17 08:39:12,914 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10323 states and 18934 transitions. [2024-11-17 08:39:13,064 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10323 to 10278. [2024-11-17 08:39:13,089 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10278 states, 10278 states have (on average 1.835473827592917) internal successors, (18865), 10277 states have internal predecessors, (18865), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:13,108 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10278 states to 10278 states and 18865 transitions. [2024-11-17 08:39:13,109 INFO L240 hiAutomatonCegarLoop]: Abstraction has 10278 states and 18865 transitions. [2024-11-17 08:39:13,113 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-11-17 08:39:13,116 INFO L425 stractBuchiCegarLoop]: Abstraction has 10278 states and 18865 transitions. [2024-11-17 08:39:13,117 INFO L332 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2024-11-17 08:39:13,117 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10278 states and 18865 transitions. [2024-11-17 08:39:13,150 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2298 [2024-11-17 08:39:13,151 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:13,151 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:13,154 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:13,154 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:13,155 INFO L745 eck$LassoCheckResult]: Stem: 22796#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 22797#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 18003#L2430 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 18004#L2423 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 21677#L2438 assume true;main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 21973#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 19766#L2754 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 18537#L247 assume true;assume { :end_inline_initFloors } true; 18538#L1004 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 18940#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 18013#L903-1 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 19730#L525-1 assume 0 == initPersonOnFloor_~floor#1; 21445#L526-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 16627#L667-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 22672#L317-1 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 16801#L338-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 16802#L669-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 20905#L2504-1 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 20861#L1184-4 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 19547#L1236-14 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 19548#L2814-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 22408#L2815-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 19596#L1201-45 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 18138#L1222-45 assume true;__utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 20142#L2819-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 17942#L2937-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 21470#L254-109 assume !(0 == isFloorCalling_~floorID#1); 21643#L258-109 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 17201#L272-109 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 17202#L1797-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 17228#L1809-4 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 21685#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 23011#L2039-4 assume !(1 == ~doorState~0); 22444#L2045-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 22445#L1388-9 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 22897#L828-24 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 20788#L1392-9 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 16686#L1559-9 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 22980#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 22927#L1764-12 assume !(1 == ~currentHeading~0); 22928#L1774-12 assume !(0 == ~currentFloorID~0); 21915#L1780-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 20035#L1785-12 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 20036#L2069-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 21085#L2945-4 assume !(-1 == ~expectedDirection~0); 21086#L2954-4 assume true; 18056#L2958-4 assume !(1 == ~expectedDirection~0); 18058#L2973-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 23369#L2071-4 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 23368#L1184-3 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 23367#L1236-11 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 21845#L2814-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 17397#L2815-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 17398#L1201-34 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 16635#L1222-34 assume true;__utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 19936#L2819-3 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 16647#L2937-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 17016#L254-88 assume !(0 == isFloorCalling_~floorID#1); 22464#L258-88 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 19521#L272-88 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 17655#L1797-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 17657#L1809-3 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 18189#L1948-3 assume !(0 != timeShift_~tmp___9~2#1); 18191#L2039-3 assume !(1 == ~doorState~0); 23107#L2045-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 20306#L1388-7 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 20307#L828-19 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 21572#L1392-7 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 16878#L1559-7 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 19680#L2047-3 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 19681#L1764-9 assume !(1 == ~currentHeading~0); 21409#L1774-9 assume !(0 == ~currentFloorID~0); 21410#L1780-9 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 22083#L1785-9 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 21371#L2069-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 25917#L2945-3 assume !(-1 == ~expectedDirection~0); 25915#L2954-3 assume true; 25913#L2958-3 assume !(1 == ~expectedDirection~0); 25911#L2973-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 25910#L2071-3 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 25909#L1184-2 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 25908#L1236-8 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 25907#L2814-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 25906#L2815-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 18375#L1201-23 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 18147#L1222-23 assume true;__utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 18135#L2819-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 17785#L2937-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 21883#L254-67 assume !(0 == isFloorCalling_~floorID#1); 18047#L258-67 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 18048#L272-67 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 20456#L1797-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 21197#L1809-2 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 22890#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 21564#L2039-2 assume !(1 == ~doorState~0); 20686#L2045-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 20687#L1388-5 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 23207#L828-14 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 23195#L1392-5 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 17955#L1559-5 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 23188#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 21179#L1764-6 assume !(1 == ~currentHeading~0); 21181#L1774-6 assume !(0 == ~currentFloorID~0); 21343#L1780-6 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 21344#L1785-6 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 21382#L2069-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 22615#L2945-2 assume !(-1 == ~expectedDirection~0); 24395#L2954-2 assume true; 24393#L2958-2 assume !(1 == ~expectedDirection~0); 24391#L2973-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 24390#L2071-2 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 24389#L2571 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 24387#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 24382#L903 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 24381#L525 assume 0 == initPersonOnFloor_~floor#1; 24347#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 24346#L667 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 24341#L317 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 24340#L338 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 24339#L669 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 24338#L2504 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 24337#L1184-1 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 24336#L1236-5 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 24335#L2814-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 24334#L2815-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 21590#L1201-12 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 19885#L1222-12 assume true;__utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 19886#L2819-1 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 18508#L2937-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 21364#L254-46 assume !(0 == isFloorCalling_~floorID#1); 22118#L258-46 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 17264#L272-46 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 21241#L1797-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 19162#L1809-1 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 19163#L1948-1 assume !(0 != timeShift_~tmp___9~2#1); 23289#L2039-1 assume !(1 == ~doorState~0); 23287#L2045-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 23280#L1388-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 19829#L828-9 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 19830#L1392-3 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 18587#L1559-3 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 23263#L2047-1 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 23262#L1764-3 assume !(1 == ~currentHeading~0); 21881#L1774-3 assume !(0 == ~currentFloorID~0); 18497#L1780-3 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 19821#L1785-3 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 19103#L2069-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 23701#L2945-1 assume !(-1 == ~expectedDirection~0); 23699#L2954-1 assume true; 23692#L2958-1 assume !(1 == ~expectedDirection~0); 23690#L2973-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 23667#L2071-1 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 23666#L2586 [2024-11-17 08:39:13,155 INFO L747 eck$LassoCheckResult]: Loop: 23666#L2586 assume true; 23665#L2586-1 assume !false; 23664#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 23663#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 23662#L1035 assume true;cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 23661#L2594 assume 1 != cleanup_~tmp___0~8#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 23657#L254-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 23655#L272-25 assume true;anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 23534#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 23526#L1342 assume true;isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 23524#L1369 assume true;cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 23523#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 23522#L1184 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 23521#L1236-2 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 23520#L2814 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 18332#L2815 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 18333#L1201-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 19214#L1222-1 assume true;__utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 17329#L2819 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 16632#L2937 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 23441#L254-20 assume !(0 == isFloorCalling_~floorID#1); 23440#L258-20 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 23432#L272-20 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 23430#L1797 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 23429#L1809 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 20639#L1948 assume !(0 != timeShift_~tmp___9~2#1); 20641#L2039 assume 1 == ~doorState~0;~doorState~0 := 0; 20836#L2045 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 18616#L1388-1 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 18617#L828-4 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 23385#L1392-1 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 18087#L1559-1 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 21771#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 18450#L1764 assume !(1 == ~currentHeading~0); 18451#L1774 assume !(0 == ~currentFloorID~0); 20899#L1780 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 17927#L1785 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 17928#L2069 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 23675#L2945 assume !(-1 == ~expectedDirection~0); 23673#L2954 assume true; 23671#L2958 assume !(1 == ~expectedDirection~0); 23669#L2973 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 23668#L2071 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 23666#L2586 [2024-11-17 08:39:13,156 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:13,156 INFO L85 PathProgramCache]: Analyzing trace with hash -179334995, now seen corresponding path program 1 times [2024-11-17 08:39:13,156 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:13,157 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [110985563] [2024-11-17 08:39:13,157 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:13,157 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:13,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:13,323 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:13,325 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:13,325 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [110985563] [2024-11-17 08:39:13,325 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [110985563] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:13,325 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:13,326 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:13,326 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [121411439] [2024-11-17 08:39:13,326 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:13,326 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:13,326 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:13,327 INFO L85 PathProgramCache]: Analyzing trace with hash 1837611936, now seen corresponding path program 1 times [2024-11-17 08:39:13,327 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:13,327 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [899500502] [2024-11-17 08:39:13,327 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:13,327 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:13,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:13,391 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:13,392 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:13,392 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [899500502] [2024-11-17 08:39:13,392 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [899500502] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:13,392 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:13,392 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-17 08:39:13,392 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1083629972] [2024-11-17 08:39:13,392 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:13,393 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:13,393 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:13,393 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-17 08:39:13,393 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-17 08:39:13,394 INFO L87 Difference]: Start difference. First operand 10278 states and 18865 transitions. cyclomatic complexity: 8588 Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 6 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:16,747 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:16,748 INFO L93 Difference]: Finished difference Result 14711 states and 26775 transitions. [2024-11-17 08:39:16,748 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14711 states and 26775 transitions. [2024-11-17 08:39:16,812 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3457 [2024-11-17 08:39:16,877 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14711 states to 14711 states and 26775 transitions. [2024-11-17 08:39:16,878 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14711 [2024-11-17 08:39:16,895 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14711 [2024-11-17 08:39:16,895 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14711 states and 26775 transitions. [2024-11-17 08:39:16,913 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:16,914 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14711 states and 26775 transitions. [2024-11-17 08:39:16,929 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14711 states and 26775 transitions. [2024-11-17 08:39:17,170 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14711 to 13942. [2024-11-17 08:39:17,188 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13942 states, 13942 states have (on average 1.832018361784536) internal successors, (25542), 13941 states have internal predecessors, (25542), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:17,209 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13942 states to 13942 states and 25542 transitions. [2024-11-17 08:39:17,210 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13942 states and 25542 transitions. [2024-11-17 08:39:17,210 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-11-17 08:39:17,212 INFO L425 stractBuchiCegarLoop]: Abstraction has 13942 states and 25542 transitions. [2024-11-17 08:39:17,212 INFO L332 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2024-11-17 08:39:17,212 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13942 states and 25542 transitions. [2024-11-17 08:39:17,266 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3265 [2024-11-17 08:39:17,266 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:17,266 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:17,270 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:17,270 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:17,272 INFO L745 eck$LassoCheckResult]: Stem: 47723#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 47724#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 42995#L2430 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 42996#L2423 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 46639#L2438 assume true;main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 46919#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 44748#L2754 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 43527#L247 assume true;assume { :end_inline_initFloors } true; 43528#L1004 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 43927#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 43005#L903-1 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 44713#L525-1 assume 0 == initPersonOnFloor_~floor#1; 46408#L526-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 41634#L667-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 47600#L317-1 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 41811#L338-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 41812#L669-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 45878#L2504-1 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 45836#L1184-4 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 44533#L1236-14 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 44534#L2814-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 47344#L2815-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 44581#L1201-45 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 43129#L1222-45 assume true;__utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 45121#L2819-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 42938#L2937-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 46432#L254-109 assume !(0 == isFloorCalling_~floorID#1); 46605#L258-109 assume !(1 == isFloorCalling_~floorID#1); 46424#L262-109 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 42205#L272-109 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 42206#L1797-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 42232#L1809-4 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 46646#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 47920#L2039-4 assume !(1 == ~doorState~0); 47376#L2045-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 47377#L1388-9 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 47819#L828-24 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 45768#L1392-9 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 41693#L1559-9 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 47894#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 47847#L1764-12 assume !(1 == ~currentHeading~0); 47848#L1774-12 assume !(0 == ~currentFloorID~0); 46865#L1780-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 45013#L1785-12 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 45014#L2069-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 46052#L2945-4 assume !(-1 == ~expectedDirection~0); 46053#L2954-4 assume true; 43047#L2958-4 assume !(1 == ~expectedDirection~0); 43049#L2973-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 46988#L2071-4 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 47751#L1184-3 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 43495#L1236-11 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 43496#L2814-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 42395#L2815-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 41762#L2822-3 assume true; 41763#L2826-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 49574#L1201-35 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 49562#L1222-35 assume true;__utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 49555#L2830-3 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 49551#L2937-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 49548#L254-88 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 49543#L272-88 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 49524#L1797-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 49521#L1809-3 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 49519#L1948-3 assume !(0 != timeShift_~tmp___9~2#1); 49517#L2039-3 assume !(1 == ~doorState~0); 49501#L2045-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 49491#L1388-7 assume !(1 == stopRequestedInDirection_~dir#1); 49475#L1557-7 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 49472#L1559-7 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 49470#L2047-3 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 49471#L1764-9 assume !(1 == ~currentHeading~0); 55556#L1774-9 assume !(0 == ~currentFloorID~0); 46374#L1780-9 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 47030#L1785-9 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 46335#L2069-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 54731#L2945-3 assume !(-1 == ~expectedDirection~0); 54729#L2954-3 assume true; 54727#L2958-3 assume !(1 == ~expectedDirection~0); 54725#L2973-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 54724#L2071-3 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 54723#L1184-2 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 54722#L1236-8 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 54721#L2814-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 44822#L2815-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 44328#L2822-2 assume true; 44329#L2826-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 44349#L1201-24 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 43431#L1222-24 assume true;__utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 44744#L2830-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 48313#L2937-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 48311#L254-67 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 48303#L272-67 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 48299#L1797-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 48295#L1809-2 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 48289#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 48284#L2039-2 assume !(1 == ~doorState~0); 48270#L2045-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 48265#L1388-5 assume !(1 == stopRequestedInDirection_~dir#1); 48218#L1557-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 48215#L1559-5 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 48214#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 46143#L1764-6 assume !(1 == ~currentHeading~0); 46145#L1774-6 assume !(0 == ~currentFloorID~0); 46308#L1780-6 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 46309#L1785-6 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 46952#L2069-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 48415#L2945-2 assume !(-1 == ~expectedDirection~0); 48412#L2954-2 assume true; 48410#L2958-2 assume !(1 == ~expectedDirection~0); 48408#L2973-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 48407#L2071-2 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 48406#L2571 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 48404#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 48399#L903 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 48398#L525 assume 0 == initPersonOnFloor_~floor#1; 48357#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 48314#L667 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 48156#L317 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 48155#L338 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 48154#L669 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 48153#L2504 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 48152#L1184-1 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 48150#L1236-5 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 48148#L2814-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 48149#L2815-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 48151#L2822-1 assume true; 48143#L2826-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 48126#L1201-13 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 48113#L1222-13 assume true;__utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 48106#L2830-1 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 48102#L2937-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 48091#L254-46 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 48081#L272-46 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 48071#L1797-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 48063#L1809-1 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 48056#L1948-1 assume !(0 != timeShift_~tmp___9~2#1); 48050#L2039-1 assume !(1 == ~doorState~0); 48046#L2045-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 48040#L1388-3 assume !(1 == stopRequestedInDirection_~dir#1); 48015#L1557-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 48005#L1559-3 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 48002#L2047-1 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 48003#L1764-3 assume !(1 == ~currentHeading~0); 49620#L1774-3 assume !(0 == ~currentFloorID~0); 43488#L1780-3 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 44802#L1785-3 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 44090#L2069-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 45732#L2945-1 assume !(-1 == ~expectedDirection~0); 53093#L2954-1 assume true; 53091#L2958-1 assume !(1 == ~expectedDirection~0); 47922#L2973-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 47923#L2071-1 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 50536#L2586 [2024-11-17 08:39:17,273 INFO L747 eck$LassoCheckResult]: Loop: 50536#L2586 assume true; 50535#L2586-1 assume !false; 50534#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 49679#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 49680#L1035 assume true;cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 49669#L2594 assume 1 != cleanup_~tmp___0~8#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 49670#L254-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 50517#L272-25 assume true;anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 50506#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 50500#L1342 assume true;isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 50499#L1369 assume true;cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 50498#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 50497#L1184 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 50496#L1236-2 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 50494#L2814 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 50493#L2815 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 50492#L2822 assume true; 50490#L2826 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 47681#L1201-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 49365#L1222-2 assume true;__utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 49358#L2830 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 49355#L2937 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 49353#L254-20 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 49345#L272-20 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 49342#L1797 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 49339#L1809 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 49335#L1948 assume !(0 != timeShift_~tmp___9~2#1); 49332#L2039 assume 1 == ~doorState~0;~doorState~0 := 0; 49306#L2045 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 49297#L1388-1 assume !(1 == stopRequestedInDirection_~dir#1); 49276#L1557-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 49273#L1559-1 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 49268#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 49269#L1764 assume !(1 == ~currentHeading~0); 49606#L1774 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 45872#L1780 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 42916#L1785 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 42917#L2069 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 47149#L2945 assume !(-1 == ~expectedDirection~0); 46084#L2954 assume true; 46514#L2958 assume !(1 == ~expectedDirection~0); 43148#L2973 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 50537#L2071 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 50536#L2586 [2024-11-17 08:39:17,273 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:17,273 INFO L85 PathProgramCache]: Analyzing trace with hash 424143216, now seen corresponding path program 1 times [2024-11-17 08:39:17,273 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:17,273 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [421030193] [2024-11-17 08:39:17,273 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:17,274 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:17,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:17,420 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:17,420 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:17,421 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [421030193] [2024-11-17 08:39:17,421 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [421030193] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:17,421 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:17,421 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:17,421 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [188089798] [2024-11-17 08:39:17,421 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:17,422 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:17,423 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:17,424 INFO L85 PathProgramCache]: Analyzing trace with hash -208365450, now seen corresponding path program 1 times [2024-11-17 08:39:17,424 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:17,424 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1070261095] [2024-11-17 08:39:17,424 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:17,424 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:17,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:17,490 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:17,490 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:17,490 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1070261095] [2024-11-17 08:39:17,490 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1070261095] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:17,490 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:17,490 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:17,491 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1730490346] [2024-11-17 08:39:17,491 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:17,491 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:17,491 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:17,491 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-17 08:39:17,491 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-17 08:39:17,491 INFO L87 Difference]: Start difference. First operand 13942 states and 25542 transitions. cyclomatic complexity: 11601 Second operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:18,174 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:18,174 INFO L93 Difference]: Finished difference Result 13946 states and 25478 transitions. [2024-11-17 08:39:18,174 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13946 states and 25478 transitions. [2024-11-17 08:39:18,224 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3269 [2024-11-17 08:39:18,272 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13946 states to 13946 states and 25478 transitions. [2024-11-17 08:39:18,272 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13946 [2024-11-17 08:39:18,285 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13946 [2024-11-17 08:39:18,286 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13946 states and 25478 transitions. [2024-11-17 08:39:18,301 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:18,302 INFO L218 hiAutomatonCegarLoop]: Abstraction has 13946 states and 25478 transitions. [2024-11-17 08:39:18,317 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13946 states and 25478 transitions. [2024-11-17 08:39:18,579 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13946 to 13942. [2024-11-17 08:39:18,598 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13942 states, 13942 states have (on average 1.8271410127671783) internal successors, (25474), 13941 states have internal predecessors, (25474), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:18,619 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13942 states to 13942 states and 25474 transitions. [2024-11-17 08:39:18,619 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13942 states and 25474 transitions. [2024-11-17 08:39:18,620 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-17 08:39:18,620 INFO L425 stractBuchiCegarLoop]: Abstraction has 13942 states and 25474 transitions. [2024-11-17 08:39:18,620 INFO L332 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2024-11-17 08:39:18,620 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13942 states and 25474 transitions. [2024-11-17 08:39:18,740 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3265 [2024-11-17 08:39:18,740 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:18,740 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:18,742 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:18,743 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:18,743 INFO L745 eck$LassoCheckResult]: Stem: 75686#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 75687#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 70894#L2430 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 70895#L2423 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 74580#L2438 assume true;main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 74873#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 72663#L2754 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 71430#L247 assume true;assume { :end_inline_initFloors } true; 71431#L1004 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 71833#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 70904#L903-1 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 72624#L525-1 assume 0 == initPersonOnFloor_~floor#1; 74347#L526-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 69531#L667-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 75567#L317-1 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 69707#L338-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 69708#L669-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 73801#L2504-1 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 73759#L1184-4 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 72443#L1236-14 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 72444#L2814-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 75304#L2815-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 72492#L1201-45 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 71028#L1222-45 assume true;__utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 73044#L2819-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 70837#L2937-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 74372#L254-109 assume !(0 == isFloorCalling_~floorID#1); 74543#L258-109 assume !(1 == isFloorCalling_~floorID#1); 74364#L262-109 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 70103#L272-109 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 70104#L1797-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 70129#L1809-4 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 74588#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 75910#L2039-4 assume !(1 == ~doorState~0); 75338#L2045-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 75339#L1388-9 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 75795#L828-24 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 73688#L1392-9 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 69590#L1559-9 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 75878#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 75827#L1764-12 assume !(1 == ~currentHeading~0); 75828#L1774-12 assume !(0 == ~currentFloorID~0); 74818#L1780-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 72933#L1785-12 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 72934#L2069-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 76613#L2945-4 assume !(-1 == ~expectedDirection~0); 76611#L2954-4 assume true; 76609#L2958-4 assume !(1 == ~expectedDirection~0); 76607#L2973-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 76605#L2071-4 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 76603#L1184-3 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 76602#L1236-11 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 76600#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 76601#L2876-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 76617#L1201-39 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 76615#L1222-39 assume true;__utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 76572#L2880-3 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 76569#L2937-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 76568#L254-88 assume !(0 == isFloorCalling_~floorID#1); 76566#L258-88 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 76561#L272-88 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 76558#L1797-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 76555#L1809-3 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 76553#L1948-3 assume !(0 != timeShift_~tmp___9~2#1); 76552#L2039-3 assume !(1 == ~doorState~0); 76550#L2045-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 76548#L1388-7 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 76547#L828-19 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 76503#L1392-7 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 69781#L1559-7 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 72575#L2047-3 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 72576#L1764-9 assume !(1 == ~currentHeading~0); 74309#L1774-9 assume !(0 == ~currentFloorID~0); 74310#L1780-9 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 74985#L1785-9 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 74268#L2069-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 78997#L2945-3 assume !(-1 == ~expectedDirection~0); 78994#L2954-3 assume true; 78991#L2958-3 assume !(1 == ~expectedDirection~0); 78986#L2973-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 78984#L2071-3 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 78980#L1184-2 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 78978#L1236-8 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 78976#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 78970#L2876-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 78965#L1201-28 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 78960#L1222-28 assume true;__utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 78939#L2880-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 78936#L2937-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 78935#L254-67 assume !(0 == isFloorCalling_~floorID#1); 78926#L258-67 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 78924#L272-67 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 78916#L1797-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 78913#L1809-2 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 78911#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 74463#L2039-2 assume !(1 == ~doorState~0); 73583#L2045-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 73584#L1388-5 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 74665#L828-14 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 73788#L1392-5 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 70233#L1559-5 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 70554#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 70555#L1764-6 assume !(1 == ~currentHeading~0); 75343#L1774-6 assume !(0 == ~currentFloorID~0); 74241#L1780-6 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 74242#L1785-6 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 74906#L2069-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 78340#L2945-2 assume !(-1 == ~expectedDirection~0); 78338#L2954-2 assume true; 78330#L2958-2 assume !(1 == ~expectedDirection~0); 78325#L2973-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 78323#L2071-2 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 78317#L2571 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 78254#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 78248#L903 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 78246#L525 assume 0 == initPersonOnFloor_~floor#1; 78212#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 78211#L667 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 78206#L317 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 78200#L338 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 78198#L669 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 78196#L2504 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 78194#L1184-1 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 78192#L1236-5 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 78190#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 76415#L2876-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 75914#L1201-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 70073#L1222-17 assume true;__utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 75899#L2880-1 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 78163#L2937-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 78162#L254-46 assume !(0 == isFloorCalling_~floorID#1); 78153#L258-46 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 78151#L272-46 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 78143#L1797-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 78136#L1809-1 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 78134#L1948-1 assume !(0 != timeShift_~tmp___9~2#1); 72441#L2039-1 assume !(1 == ~doorState~0); 72442#L2045-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 73807#L1388-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 73808#L828-9 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 76480#L1392-3 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 69864#L1559-3 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 69865#L2047-1 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 72138#L1764-3 assume !(1 == ~currentHeading~0); 73939#L1774-3 assume !(0 == ~currentFloorID~0); 71390#L1780-3 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 72717#L1785-3 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 71993#L2069-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 82589#L2945-1 assume !(-1 == ~expectedDirection~0); 82584#L2954-1 assume true; 82581#L2958-1 assume !(1 == ~expectedDirection~0); 82576#L2973-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 82573#L2071-1 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 82572#L2586 [2024-11-17 08:39:18,744 INFO L747 eck$LassoCheckResult]: Loop: 82572#L2586 assume true; 82571#L2586-1 assume !false; 82570#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 82569#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 82568#L1035 assume true;cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 82567#L2594 assume 1 != cleanup_~tmp___0~8#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 82563#L254-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 82561#L272-25 assume true;anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 82551#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 76744#L1342 assume true;isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 76743#L1369 assume true;cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 76741#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 76739#L1184 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 76737#L1236-2 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 76735#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 76710#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 76709#L1201-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 75814#L1222-6 assume true;__utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 75815#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 76694#L2937 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 76692#L254-20 assume !(0 == isFloorCalling_~floorID#1); 76689#L258-20 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 76691#L272-20 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 77645#L1797 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4#1;stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 77642#L1809 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 77640#L1948 assume !(0 != timeShift_~tmp___9~2#1); 73539#L2039 assume 1 == ~doorState~0;~doorState~0 := 0; 73731#L2045 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 71507#L1388-1 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 71508#L828-4 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 74114#L1392-1 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 70187#L1559-1 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 74671#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 71340#L1764 assume !(1 == ~currentHeading~0); 71341#L1774 assume !(0 == ~currentFloorID~0); 73795#L1780 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 70814#L1785 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 70815#L2069 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 82586#L2945 assume !(-1 == ~expectedDirection~0); 82583#L2954 assume true; 82578#L2958 assume !(1 == ~expectedDirection~0); 82575#L2973 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 82574#L2071 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 82572#L2586 [2024-11-17 08:39:18,744 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:18,744 INFO L85 PathProgramCache]: Analyzing trace with hash -677164420, now seen corresponding path program 1 times [2024-11-17 08:39:18,745 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:18,745 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1148741381] [2024-11-17 08:39:18,745 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:18,746 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:18,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:18,873 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:18,873 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:18,874 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1148741381] [2024-11-17 08:39:18,874 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1148741381] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:18,874 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:18,874 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:18,875 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1822957036] [2024-11-17 08:39:18,875 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:18,875 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:18,875 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:18,875 INFO L85 PathProgramCache]: Analyzing trace with hash 1004087009, now seen corresponding path program 1 times [2024-11-17 08:39:18,875 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:18,875 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1582183379] [2024-11-17 08:39:18,875 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:18,875 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:18,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:18,914 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:18,915 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:18,915 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1582183379] [2024-11-17 08:39:18,915 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1582183379] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:18,915 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:18,915 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-17 08:39:18,916 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1775424978] [2024-11-17 08:39:18,916 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:18,916 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:18,916 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:18,916 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-17 08:39:18,916 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-17 08:39:18,917 INFO L87 Difference]: Start difference. First operand 13942 states and 25474 transitions. cyclomatic complexity: 11533 Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:20,141 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:20,141 INFO L93 Difference]: Finished difference Result 13968 states and 25500 transitions. [2024-11-17 08:39:20,141 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13968 states and 25500 transitions. [2024-11-17 08:39:20,193 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3271 [2024-11-17 08:39:20,236 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13968 states to 13968 states and 25500 transitions. [2024-11-17 08:39:20,237 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13968 [2024-11-17 08:39:20,257 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13968 [2024-11-17 08:39:20,258 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13968 states and 25500 transitions. [2024-11-17 08:39:20,272 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:20,272 INFO L218 hiAutomatonCegarLoop]: Abstraction has 13968 states and 25500 transitions. [2024-11-17 08:39:20,289 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13968 states and 25500 transitions. [2024-11-17 08:39:20,535 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13968 to 13968. [2024-11-17 08:39:20,555 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13968 states, 13968 states have (on average 1.8256013745704467) internal successors, (25500), 13967 states have internal predecessors, (25500), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:20,584 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13968 states to 13968 states and 25500 transitions. [2024-11-17 08:39:20,585 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13968 states and 25500 transitions. [2024-11-17 08:39:20,588 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-17 08:39:20,590 INFO L425 stractBuchiCegarLoop]: Abstraction has 13968 states and 25500 transitions. [2024-11-17 08:39:20,590 INFO L332 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2024-11-17 08:39:20,590 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13968 states and 25500 transitions. [2024-11-17 08:39:20,646 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3271 [2024-11-17 08:39:20,646 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:20,647 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:20,649 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:20,649 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:20,650 INFO L745 eck$LassoCheckResult]: Stem: 103584#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 103585#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 98814#L2430 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 98815#L2423 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 102488#L2438 assume true;main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 102777#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 100572#L2754 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 99350#L247 assume true;assume { :end_inline_initFloors } true; 99351#L1004 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 99750#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 98824#L903-1 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 100535#L525-1 assume 0 == initPersonOnFloor_~floor#1; 102252#L526-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 97451#L667-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 103460#L317-1 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 97624#L338-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 97625#L669-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 101713#L2504-1 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 101669#L1184-4 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 100354#L1236-14 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 100355#L2814-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 103203#L2815-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 100402#L1201-45 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 98949#L1222-45 assume true;__utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 100953#L2819-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 98754#L2937-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 102277#L254-109 assume !(0 == isFloorCalling_~floorID#1); 102449#L258-109 assume !(1 == isFloorCalling_~floorID#1); 102269#L262-109 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 98023#L272-109 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 98024#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 101219#L1201-44 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 101558#L1222-44 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 98048#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 98049#L1809-4 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 104018#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 103812#L2039-4 assume !(1 == ~doorState~0); 103236#L2045-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 103237#L1388-9 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 103688#L828-24 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 101598#L1392-9 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 97510#L1559-9 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 103764#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 103717#L1764-12 assume !(1 == ~currentHeading~0); 103718#L1774-12 assume !(0 == ~currentFloorID~0); 102721#L1780-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 100844#L1785-12 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 100845#L2069-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 101894#L2945-4 assume !(-1 == ~expectedDirection~0); 101895#L2954-4 assume true; 98866#L2958-4 assume !(1 == ~expectedDirection~0); 98868#L2973-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 102846#L2071-4 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 103618#L1184-3 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 99318#L1236-11 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 99319#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 97523#L2876-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 97525#L1201-39 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 99137#L1222-39 assume true;__utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 99138#L2880-3 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 97838#L2937-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 97839#L254-88 assume !(0 == isFloorCalling_~floorID#1); 103255#L258-88 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 100326#L272-88 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 98467#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 98468#L1201-33 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 103331#L1222-33 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 102377#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 102378#L1809-3 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 104151#L1948-3 assume !(0 != timeShift_~tmp___9~2#1); 101306#L2039-3 assume !(1 == ~doorState~0); 101307#L2045-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 101116#L1388-7 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 101117#L828-19 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 102379#L1392-7 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 97701#L1559-7 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 100485#L2047-3 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 100486#L1764-9 assume !(1 == ~currentHeading~0); 102218#L1774-9 assume !(0 == ~currentFloorID~0); 102219#L1780-9 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 102886#L1785-9 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 102179#L2069-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 98459#L2945-3 assume !(-1 == ~expectedDirection~0); 98460#L2954-3 assume true; 100338#L2958-3 assume !(1 == ~expectedDirection~0); 102897#L2973-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 100003#L2071-3 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 99756#L1184-2 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 99757#L1236-8 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 100865#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 104017#L2876-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 100960#L1201-28 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 100941#L1222-28 assume true;__utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 100942#L2880-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 104263#L2937-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 104262#L254-67 assume !(0 == isFloorCalling_~floorID#1); 104261#L258-67 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 101265#L272-67 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 101266#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 98028#L1201-22 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 98030#L1222-22 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 101195#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 103705#L1809-2 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 104019#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 102370#L2039-2 assume !(1 == ~doorState~0); 101495#L2045-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 101496#L1388-5 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 102571#L828-14 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 101700#L1392-5 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 98155#L1559-5 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 98475#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 98476#L1764-6 assume !(1 == ~currentHeading~0); 101987#L1774-6 assume !(0 == ~currentFloorID~0); 102152#L1780-6 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 102153#L1785-6 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 102813#L2069-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 108810#L2945-2 assume !(-1 == ~expectedDirection~0); 108808#L2954-2 assume true; 108806#L2958-2 assume !(1 == ~expectedDirection~0); 108804#L2973-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 108803#L2071-2 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 108802#L2571 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 108799#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 108793#L903 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 108792#L525 assume 0 == initPersonOnFloor_~floor#1; 108753#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 108752#L667 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 108150#L317 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 108148#L338 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 108146#L669 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 108144#L2504 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 108142#L1184-1 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 108140#L1236-5 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 108136#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 108137#L2876-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 108813#L1201-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 108812#L1222-17 assume true;__utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 108110#L2880-1 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 108107#L2937-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 108106#L254-46 assume !(0 == isFloorCalling_~floorID#1); 108102#L258-46 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 108097#L272-46 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 108092#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 108093#L1201-11 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 108096#L1222-11 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 108094#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 108095#L1809-1 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 108082#L1948-1 assume !(0 != timeShift_~tmp___9~2#1); 104159#L2039-1 assume !(1 == ~doorState~0); 103610#L2045-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 103611#L1388-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 104174#L828-9 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 104347#L1392-3 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 99400#L1559-3 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 104339#L2047-1 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 101848#L1764-3 assume !(1 == ~currentHeading~0); 101850#L1774-3 assume !(0 == ~currentFloorID~0); 99311#L1780-3 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 100627#L1785-3 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 99911#L2069-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 100410#L2945-1 assume !(-1 == ~expectedDirection~0); 100412#L2954-1 assume true; 103217#L2958-1 assume !(1 == ~expectedDirection~0); 101494#L2973-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 103792#L2071-1 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 98932#L2586 [2024-11-17 08:39:20,651 INFO L747 eck$LassoCheckResult]: Loop: 98932#L2586 assume true; 101801#L2586-1 assume !false; 101802#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 98176#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 98018#L1035 assume true;cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 98019#L2594 assume 1 != cleanup_~tmp___0~8#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 101188#L254-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 98141#L272-25 assume true;anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 102083#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 100423#L1342 assume true;isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 100698#L1369 assume true;cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 102878#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 98700#L1184 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 98701#L1236-2 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 103393#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 103496#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 101041#L1201-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 97970#L1222-6 assume true;__utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 103708#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 104242#L2937 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 104241#L254-20 assume !(0 == isFloorCalling_~floorID#1); 104238#L258-20 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 104240#L272-20 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 107246#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 107242#L1201 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 107240#L1222 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 107232#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 107230#L1809 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 107228#L1948 assume !(0 != timeShift_~tmp___9~2#1); 103870#L2039 assume 1 == ~doorState~0;~doorState~0 := 0; 103868#L2045 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 103867#L1388-1 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 103848#L828-4 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 103838#L1392-1 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 98897#L1559-1 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 103828#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 103827#L1764 assume !(1 == ~currentHeading~0); 101959#L1774 assume !(0 == ~currentFloorID~0); 101707#L1780 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 98739#L1785 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 98740#L2069 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 103004#L2945 assume !(-1 == ~expectedDirection~0); 101924#L2954 assume true; 102358#L2958 assume !(1 == ~expectedDirection~0); 98968#L2973 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 98931#L2071 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 98932#L2586 [2024-11-17 08:39:20,652 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:20,652 INFO L85 PathProgramCache]: Analyzing trace with hash -751030533, now seen corresponding path program 1 times [2024-11-17 08:39:20,652 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:20,653 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [820015744] [2024-11-17 08:39:20,653 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:20,653 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:20,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:20,825 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:20,825 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:20,825 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [820015744] [2024-11-17 08:39:20,825 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [820015744] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:20,826 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:20,826 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:20,826 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1462021767] [2024-11-17 08:39:20,826 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:20,826 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:20,826 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:20,826 INFO L85 PathProgramCache]: Analyzing trace with hash 1216849886, now seen corresponding path program 1 times [2024-11-17 08:39:20,827 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:20,827 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1921596309] [2024-11-17 08:39:20,827 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:20,827 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:20,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:20,874 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:20,875 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:20,875 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1921596309] [2024-11-17 08:39:20,875 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1921596309] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:20,875 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:20,875 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-17 08:39:20,875 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1428528187] [2024-11-17 08:39:20,875 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:20,875 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:20,876 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:20,876 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-17 08:39:20,876 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-17 08:39:20,876 INFO L87 Difference]: Start difference. First operand 13968 states and 25500 transitions. cyclomatic complexity: 11533 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:23,891 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:23,891 INFO L93 Difference]: Finished difference Result 18497 states and 33699 transitions. [2024-11-17 08:39:23,891 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18497 states and 33699 transitions. [2024-11-17 08:39:23,957 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4453 [2024-11-17 08:39:24,013 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18497 states to 18497 states and 33699 transitions. [2024-11-17 08:39:24,013 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18497 [2024-11-17 08:39:24,028 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18497 [2024-11-17 08:39:24,028 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18497 states and 33699 transitions. [2024-11-17 08:39:24,046 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:24,046 INFO L218 hiAutomatonCegarLoop]: Abstraction has 18497 states and 33699 transitions. [2024-11-17 08:39:24,062 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18497 states and 33699 transitions. [2024-11-17 08:39:24,200 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18497 to 13952. [2024-11-17 08:39:24,218 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13952 states, 13952 states have (on average 1.825043004587156) internal successors, (25463), 13951 states have internal predecessors, (25463), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:24,244 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13952 states to 13952 states and 25463 transitions. [2024-11-17 08:39:24,245 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13952 states and 25463 transitions. [2024-11-17 08:39:24,246 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-17 08:39:24,248 INFO L425 stractBuchiCegarLoop]: Abstraction has 13952 states and 25463 transitions. [2024-11-17 08:39:24,248 INFO L332 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2024-11-17 08:39:24,248 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13952 states and 25463 transitions. [2024-11-17 08:39:24,296 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3267 [2024-11-17 08:39:24,296 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:24,297 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:24,299 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:24,299 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:24,300 INFO L745 eck$LassoCheckResult]: Stem: 135943#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 135944#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 131287#L2430 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 131288#L2423 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 134897#L2438 assume true;main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 135177#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 133028#L2754 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 131816#L247 assume true;assume { :end_inline_initFloors } true; 131817#L1004 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 132214#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 131297#L903-1 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 132992#L525-1 assume 0 == initPersonOnFloor_~floor#1; 134671#L526-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 129930#L667-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 135827#L317-1 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 130103#L338-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 130104#L669-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 134149#L2504-1 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 134105#L1184-4 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 132813#L1236-14 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 132814#L2814-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 135584#L2815-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 132861#L1201-45 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 131421#L1222-45 assume true;__utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 133400#L2819-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 131227#L2937-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 134696#L254-109 assume !(0 == isFloorCalling_~floorID#1); 134864#L258-109 assume !(1 == isFloorCalling_~floorID#1); 134688#L262-109 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 130498#L272-109 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 130499#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 133662#L1201-44 assume !(0 == buttonForFloorIsPressed_~floorID#1); 134781#L1205-44 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 133995#L1222-44 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 130522#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 130523#L1809-4 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 136131#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 136128#L2039-4 assume !(1 == ~doorState~0); 135618#L2045-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 135619#L1388-9 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 136030#L828-24 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 134034#L1392-9 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 129989#L1559-9 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 136095#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 136057#L1764-12 assume !(1 == ~currentHeading~0); 136058#L1774-12 assume !(0 == ~currentFloorID~0); 135124#L1780-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 133293#L1785-12 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 133294#L2069-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 134322#L2945-4 assume !(-1 == ~expectedDirection~0); 134323#L2954-4 assume true; 131339#L2958-4 assume !(1 == ~expectedDirection~0); 131341#L2973-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 135240#L2071-4 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 135969#L1184-3 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 131785#L1236-11 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 131786#L2814-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 135057#L2815-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 138254#L2822-3 assume true; 138249#L2826-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 138244#L1201-35 assume !(0 == buttonForFloorIsPressed_~floorID#1); 138229#L1205-35 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 138218#L1222-35 assume true;__utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 138211#L2830-3 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 138208#L2937-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 138207#L254-88 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 138202#L272-88 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 138199#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 138200#L1201-33 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 138201#L1222-33 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 138197#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 138198#L1809-3 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 138572#L1948-3 assume !(0 != timeShift_~tmp___9~2#1); 138569#L2039-3 assume !(1 == ~doorState~0); 138568#L2045-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 138565#L1388-7 assume !(1 == stopRequestedInDirection_~dir#1); 138547#L1557-7 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 138542#L1559-7 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 138535#L2047-3 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 138536#L1764-9 assume !(1 == ~currentHeading~0); 138624#L1774-9 assume !(0 == ~currentFloorID~0); 134638#L1780-9 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 135280#L1785-9 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 134599#L2069-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 136615#L2945-3 assume !(-1 == ~expectedDirection~0); 136603#L2954-3 assume true; 136604#L2958-3 assume !(1 == ~expectedDirection~0); 136594#L2973-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 136595#L2071-3 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 136590#L1184-2 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 136591#L1236-8 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 136585#L2814-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 136586#L2815-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 137399#L2822-2 assume true; 137400#L2826-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 136573#L1201-24 assume !(0 == buttonForFloorIsPressed_~floorID#1); 136561#L1205-24 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 136550#L1222-24 assume true;__utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 136543#L2830-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 136540#L2937-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 136539#L254-67 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 136538#L272-67 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 136537#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 136528#L1201-22 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 136525#L1222-22 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 136522#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 136520#L1809-2 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 136517#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 136514#L2039-2 assume !(1 == ~doorState~0); 136491#L2045-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 136481#L1388-5 assume !(1 == stopRequestedInDirection_~dir#1); 136461#L1557-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 136454#L1559-5 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 136450#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 136451#L1764-6 assume !(1 == ~currentHeading~0); 138619#L1774-6 assume !(0 == ~currentFloorID~0); 134572#L1780-6 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 134573#L1785-6 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 135209#L2069-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 137416#L2945-2 assume !(-1 == ~expectedDirection~0); 137412#L2954-2 assume true; 137410#L2958-2 assume !(1 == ~expectedDirection~0); 137408#L2973-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 137407#L2071-2 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 137403#L2571 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 136609#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 136602#L903 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 136596#L525 assume 0 == initPersonOnFloor_~floor#1; 136356#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 136357#L667 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 136348#L317 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 136350#L338 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 136344#L669 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 136345#L2504 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 136340#L1184-1 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 136341#L1236-5 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 136333#L2814-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 136334#L2815-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 136331#L2822-1 assume true; 136332#L2826-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 136318#L1201-13 assume !(0 == buttonForFloorIsPressed_~floorID#1); 136304#L1205-13 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 136296#L1222-13 assume true;__utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 136289#L2830-1 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 136286#L2937-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 136285#L254-46 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 136284#L272-46 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 136283#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 136280#L1201-11 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 136277#L1222-11 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 136272#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 136271#L1809-1 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 136257#L1948-1 assume !(0 != timeShift_~tmp___9~2#1); 136251#L2039-1 assume !(1 == ~doorState~0); 136244#L2045-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 136239#L1388-3 assume !(1 == stopRequestedInDirection_~dir#1); 136203#L1557-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 136193#L1559-3 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 136190#L2047-1 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 136191#L1764-3 assume !(1 == ~currentHeading~0); 138620#L1774-3 assume !(0 == ~currentFloorID~0); 131778#L1780-3 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 133082#L1785-3 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 132373#L2069-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 138707#L2945-1 assume !(-1 == ~expectedDirection~0); 138703#L2954-1 assume true; 138698#L2958-1 assume !(1 == ~expectedDirection~0); 138695#L2973-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 138693#L2071-1 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 138692#L2586 [2024-11-17 08:39:24,301 INFO L747 eck$LassoCheckResult]: Loop: 138692#L2586 assume true; 138691#L2586-1 assume !false; 138690#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 138689#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 138686#L1035 assume true;cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 138680#L2594 assume 1 != cleanup_~tmp___0~8#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 138665#L254-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 138652#L272-25 assume true;anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 138653#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 138631#L1342 assume true;isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 138632#L1369 assume true;cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 138627#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 138628#L1184 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 138611#L1236-2 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 138612#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 138465#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 133488#L1201-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 130447#L1222-6 assume true;__utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 130845#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 129935#L2937 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 130548#L254-20 assume !(0 == isFloorCalling_~floorID#1); 140269#L258-20 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 140271#L272-20 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 141676#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 141675#L1201 assume !(0 == buttonForFloorIsPressed_~floorID#1); 141666#L1205 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 141664#L1222 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 141656#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 141654#L1809 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 141652#L1948 assume !(0 != timeShift_~tmp___9~2#1); 135837#L2039 assume 1 == ~doorState~0;~doorState~0 := 0; 134080#L2045 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 131893#L1388-1 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 131894#L828-4 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 134449#L1392-1 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 130582#L1559-1 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 134987#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 131730#L1764 assume !(1 == ~currentHeading~0); 131731#L1774 assume !(0 == ~currentFloorID~0); 134143#L1780 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 131212#L1785 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 131213#L2069 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 140362#L2945 assume !(-1 == ~expectedDirection~0); 140361#L2954 assume true; 138701#L2958 assume !(1 == ~expectedDirection~0); 138696#L2973 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 138694#L2071 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 138692#L2586 [2024-11-17 08:39:24,302 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:24,302 INFO L85 PathProgramCache]: Analyzing trace with hash -1612243585, now seen corresponding path program 1 times [2024-11-17 08:39:24,302 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:24,302 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1875091362] [2024-11-17 08:39:24,302 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:24,302 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:24,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:24,472 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:24,473 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:24,473 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1875091362] [2024-11-17 08:39:24,474 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1875091362] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:24,474 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:24,476 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:24,476 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1410776831] [2024-11-17 08:39:24,476 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:24,477 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:24,477 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:24,477 INFO L85 PathProgramCache]: Analyzing trace with hash 1138462134, now seen corresponding path program 1 times [2024-11-17 08:39:24,477 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:24,477 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [979998486] [2024-11-17 08:39:24,477 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:24,477 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:24,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:24,526 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:24,526 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:24,526 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [979998486] [2024-11-17 08:39:24,526 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [979998486] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:24,526 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:24,526 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-17 08:39:24,527 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1533276628] [2024-11-17 08:39:24,527 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:24,527 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:24,527 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:24,528 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-17 08:39:24,528 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-17 08:39:24,528 INFO L87 Difference]: Start difference. First operand 13952 states and 25463 transitions. cyclomatic complexity: 11512 Second operand has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 6 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:25,117 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:25,117 INFO L93 Difference]: Finished difference Result 25203 states and 46183 transitions. [2024-11-17 08:39:25,117 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 25203 states and 46183 transitions. [2024-11-17 08:39:25,216 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6204 [2024-11-17 08:39:25,294 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 25203 states to 25203 states and 46183 transitions. [2024-11-17 08:39:25,294 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 25203 [2024-11-17 08:39:25,315 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 25203 [2024-11-17 08:39:25,316 INFO L73 IsDeterministic]: Start isDeterministic. Operand 25203 states and 46183 transitions. [2024-11-17 08:39:25,340 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:25,340 INFO L218 hiAutomatonCegarLoop]: Abstraction has 25203 states and 46183 transitions. [2024-11-17 08:39:25,362 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25203 states and 46183 transitions. [2024-11-17 08:39:25,734 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25203 to 25187. [2024-11-17 08:39:25,762 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25187 states, 25187 states have (on average 1.8326517647993013) internal successors, (46159), 25186 states have internal predecessors, (46159), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:25,804 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25187 states to 25187 states and 46159 transitions. [2024-11-17 08:39:25,804 INFO L240 hiAutomatonCegarLoop]: Abstraction has 25187 states and 46159 transitions. [2024-11-17 08:39:25,804 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-17 08:39:25,806 INFO L425 stractBuchiCegarLoop]: Abstraction has 25187 states and 46159 transitions. [2024-11-17 08:39:25,806 INFO L332 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2024-11-17 08:39:25,806 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 25187 states and 46159 transitions. [2024-11-17 08:39:25,870 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6200 [2024-11-17 08:39:25,870 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:25,870 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:25,872 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:25,872 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:25,873 INFO L745 eck$LassoCheckResult]: Stem: 174587#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 174588#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 171482#L2430 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 169727#L2423 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 169728#L2438 assume true;main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 171057#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 171058#L2754 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 172330#L247 assume true;assume { :end_inline_initFloors } true; 172331#L1004 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 172935#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 171497#L903-1 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 173912#L525-1 assume 0 == initPersonOnFloor_~floor#1; 175376#L526-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 169130#L667-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 174126#L317-1 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 169419#L338-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 169420#L669-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 173981#L2504-1 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 175125#L1184-4 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 173722#L1236-14 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 173723#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 174307#L2876-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 171627#L1201-50 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 169315#L1222-50 assume true;__utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 173091#L2880-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 172261#L2937-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 174234#L254-109 assume !(0 == isFloorCalling_~floorID#1); 169511#L258-109 assume !(1 == isFloorCalling_~floorID#1); 169512#L262-109 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 170118#L272-109 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 170119#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 174698#L1201-44 assume !(0 == buttonForFloorIsPressed_~floorID#1); 174791#L1205-44 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 174671#L1222-44 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 170148#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 170149#L1809-4 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 175494#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 175458#L2039-4 assume !(1 == ~doorState~0); 173205#L2045-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 173206#L1388-9 assume !(1 == stopRequestedInDirection_~dir#1); 174643#L1557-9 assume !(0 == ~currentFloorID~0); 171546#L1563-9 assume !(~currentFloorID~0 > 0); 169718#L1575-9 assume true; 170709#L1579-9 assume ~currentFloorID~0 > 0; 170710#L1580-9 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 169238#L1581-9 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 169203#L1559-9 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 175310#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 175093#L1764-12 assume !(1 == ~currentHeading~0); 175094#L1774-12 assume !(0 == ~currentFloorID~0); 175144#L1780-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 174267#L1785-12 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 170508#L2069-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 170509#L2945-4 assume !(-1 == ~expectedDirection~0); 172706#L2954-4 assume true; 171569#L2958-4 assume !(1 == ~expectedDirection~0); 169241#L2973-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 176433#L2071-4 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 176431#L1184-3 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 176430#L1236-11 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 176429#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 175489#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 176423#L2883-3 assume true; 176422#L2887-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 176421#L2894-3 assume true; 176420#L2898-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 176419#L2905-3 assume true; 176418#L2909-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 176414#L2916-3 assume true; 176413#L2920-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 176411#L2937-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 176399#L254-88 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 176397#L272-88 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 176395#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 176386#L1201-33 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 176384#L1222-33 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 176382#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 176380#L1809-3 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 176378#L1948-3 assume !(0 != timeShift_~tmp___9~2#1); 176376#L2039-3 assume !(1 == ~doorState~0); 176375#L2045-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 176374#L1388-7 assume !(1 == stopRequestedInDirection_~dir#1); 176373#L1557-7 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 176372#L1559-7 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 176370#L2047-3 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 176371#L1764-9 assume !(1 == ~currentHeading~0); 177610#L1774-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 170002#L1780-9 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 177576#L1785-9 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 176644#L2069-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 176645#L2945-3 assume !(-1 == ~expectedDirection~0); 176588#L2954-3 assume true; 176589#L2958-3 assume !(1 == ~expectedDirection~0); 176579#L2973-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 176580#L2071-3 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 176573#L1184-2 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 176574#L1236-8 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 176565#L2814-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 176566#L2815-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 176259#L2822-2 assume true; 176260#L2826-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 176022#L1201-24 assume !(0 == buttonForFloorIsPressed_~floorID#1); 176013#L1205-24 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 175907#L1222-24 assume true;__utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 175864#L2830-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 175861#L2937-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 175858#L254-67 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 175857#L272-67 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 175856#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 175852#L1201-22 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 175850#L1222-22 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 175846#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 175844#L1809-2 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 175838#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 175833#L2039-2 assume !(1 == ~doorState~0); 175818#L2045-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 175810#L1388-5 assume !(1 == stopRequestedInDirection_~dir#1); 175781#L1557-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 175774#L1559-5 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 175771#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 175772#L1764-6 assume !(1 == ~currentHeading~0); 188321#L1774-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 173576#L1780-6 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 171214#L1785-6 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 171215#L2069-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 180441#L2945-2 assume !(-1 == ~expectedDirection~0); 180438#L2954-2 assume true; 180439#L2958-2 assume !(1 == ~expectedDirection~0); 181447#L2973-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 181446#L2071-2 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 181445#L2571 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 181443#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 181438#L903 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 180421#L525 assume 0 == initPersonOnFloor_~floor#1; 180422#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 181378#L667 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 178642#L317 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 178644#L338 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 178636#L669 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 178637#L2504 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 178604#L1184-1 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 178605#L1236-5 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 178595#L2814-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 178596#L2815-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 176651#L2822-1 assume true; 176652#L2826-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 176520#L1201-13 assume !(0 == buttonForFloorIsPressed_~floorID#1); 176516#L1205-13 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 176514#L1222-13 assume true;__utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 176478#L2830-1 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 176333#L2937-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 176324#L254-46 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 176258#L272-46 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 176250#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 176147#L1201-11 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 176144#L1222-11 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 176141#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 176139#L1809-1 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 176137#L1948-1 assume !(0 != timeShift_~tmp___9~2#1); 176135#L2039-1 assume !(1 == ~doorState~0); 176133#L2045-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 176132#L1388-3 assume !(1 == stopRequestedInDirection_~dir#1); 176053#L1557-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 176047#L1559-3 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 176046#L2047-1 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 175492#L1764-3 assume !(1 == ~currentHeading~0); 175280#L1774-3 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 172288#L1780-3 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 188320#L1785-3 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 188549#L2069-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 188546#L2945-1 assume !(-1 == ~expectedDirection~0); 188541#L2954-1 assume true; 188538#L2958-1 assume !(1 == ~expectedDirection~0); 188533#L2973-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 188530#L2071-1 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 188526#L2586 [2024-11-17 08:39:25,874 INFO L747 eck$LassoCheckResult]: Loop: 188526#L2586 assume true; 188524#L2586-1 assume !false; 188523#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 188522#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 188521#L1035 assume true;cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 188520#L2594 assume 1 != cleanup_~tmp___0~8#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 188511#L254-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 188509#L272-25 assume true;anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 188498#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 188489#L1342 assume true;isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 188488#L1369 assume true;cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 188487#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 188486#L1184 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 188485#L1236-2 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 188483#L2814 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 188481#L2815 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 188480#L2822 assume true; 188477#L2826 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 174454#L1201-2 assume !(0 == buttonForFloorIsPressed_~floorID#1); 176494#L1205-2 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 176473#L1222-2 assume true;__utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 176328#L2830 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 176323#L2937 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 176256#L254-20 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 176249#L272-20 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 176248#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 176244#L1201 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 176118#L1222 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 176116#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 176114#L1809 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 176111#L1948 assume !(0 != timeShift_~tmp___9~2#1); 176110#L2039 assume 1 == ~doorState~0;~doorState~0 := 0; 176109#L2045 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 176106#L1388-1 assume !(1 == stopRequestedInDirection_~dir#1); 176087#L1557-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 176085#L1559-1 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 176081#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 176080#L1764 assume !(1 == ~currentHeading~0); 176077#L1774 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 175161#L1780 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 176030#L1785 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 188548#L2069 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 188543#L2945 assume !(-1 == ~expectedDirection~0); 188540#L2954 assume true; 188535#L2958 assume !(1 == ~expectedDirection~0); 188532#L2973 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 188531#L2071 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 188526#L2586 [2024-11-17 08:39:25,874 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:25,874 INFO L85 PathProgramCache]: Analyzing trace with hash 791466501, now seen corresponding path program 1 times [2024-11-17 08:39:25,875 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:25,875 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [540183533] [2024-11-17 08:39:25,875 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:25,875 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:25,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:25,977 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:25,977 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:25,977 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [540183533] [2024-11-17 08:39:25,977 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [540183533] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:25,978 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:25,978 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:25,978 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [167603653] [2024-11-17 08:39:25,978 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:25,978 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:25,978 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:25,979 INFO L85 PathProgramCache]: Analyzing trace with hash 1191150138, now seen corresponding path program 1 times [2024-11-17 08:39:25,979 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:25,979 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1940627923] [2024-11-17 08:39:25,979 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:25,979 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:26,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:26,206 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:26,206 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:26,206 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1940627923] [2024-11-17 08:39:26,207 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1940627923] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:26,207 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:26,207 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-17 08:39:26,207 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1502880711] [2024-11-17 08:39:26,207 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:26,207 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:26,207 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:26,208 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-17 08:39:26,208 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-17 08:39:26,208 INFO L87 Difference]: Start difference. First operand 25187 states and 46159 transitions. cyclomatic complexity: 20973 Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 7 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:27,762 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:27,762 INFO L93 Difference]: Finished difference Result 49471 states and 90745 transitions. [2024-11-17 08:39:27,763 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 49471 states and 90745 transitions. [2024-11-17 08:39:27,936 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12211 [2024-11-17 08:39:28,072 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 49471 states to 49471 states and 90745 transitions. [2024-11-17 08:39:28,072 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 49471 [2024-11-17 08:39:28,112 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 49471 [2024-11-17 08:39:28,112 INFO L73 IsDeterministic]: Start isDeterministic. Operand 49471 states and 90745 transitions. [2024-11-17 08:39:28,298 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:28,298 INFO L218 hiAutomatonCegarLoop]: Abstraction has 49471 states and 90745 transitions. [2024-11-17 08:39:28,320 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49471 states and 90745 transitions. [2024-11-17 08:39:28,727 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49471 to 49409. [2024-11-17 08:39:28,779 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 49409 states, 49409 states have (on average 1.8353538828958287) internal successors, (90683), 49408 states have internal predecessors, (90683), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:28,872 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49409 states to 49409 states and 90683 transitions. [2024-11-17 08:39:28,872 INFO L240 hiAutomatonCegarLoop]: Abstraction has 49409 states and 90683 transitions. [2024-11-17 08:39:28,875 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-17 08:39:28,876 INFO L425 stractBuchiCegarLoop]: Abstraction has 49409 states and 90683 transitions. [2024-11-17 08:39:28,876 INFO L332 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2024-11-17 08:39:28,876 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 49409 states and 90683 transitions. [2024-11-17 08:39:29,175 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12197 [2024-11-17 08:39:29,176 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:29,176 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:29,183 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:29,183 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:29,184 INFO L745 eck$LassoCheckResult]: Stem: 249352#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 249353#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 246172#L2430 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 244401#L2423 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 244402#L2438 assume true;main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 245744#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 245745#L2754 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 247031#L247 assume true;assume { :end_inline_initFloors } true; 247032#L1004 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 247634#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 246188#L903-1 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 248642#L525-1 assume 0 == initPersonOnFloor_~floor#1; 250173#L526-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 243806#L667-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 248874#L317-1 assume !(0 == callOnFloor_~floorID#1); 246249#L320-1 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 246250#L338-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 250639#L669-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 250638#L2504-1 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 250637#L1184-4 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 250636#L1236-14 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 250635#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 250633#L2876-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 250634#L1201-50 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 250649#L1222-50 assume true;__utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 250613#L2880-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 250609#L2937-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 250608#L254-109 assume !(0 == isFloorCalling_~floorID#1); 250607#L258-109 assume !(1 == isFloorCalling_~floorID#1); 250604#L262-109 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 250603#L272-109 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 250602#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 250601#L1201-44 assume !(0 == buttonForFloorIsPressed_~floorID#1); 250584#L1205-44 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 250582#L1222-44 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 250580#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 250579#L1809-4 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 250577#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 250576#L2039-4 assume !(1 == ~doorState~0); 250575#L2045-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 250574#L1388-9 assume !(1 == stopRequestedInDirection_~dir#1); 250573#L1557-9 assume !(0 == ~currentFloorID~0); 250570#L1563-9 assume !(~currentFloorID~0 > 0); 244392#L1575-9 assume true; 250569#L1579-9 assume ~currentFloorID~0 > 0; 250568#L1580-9 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 243914#L1581-9 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 243879#L1559-9 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 250202#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 250203#L1764-12 assume !(1 == ~currentHeading~0); 251658#L1774-12 assume !(0 == ~currentFloorID~0); 251657#L1780-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 251653#L1785-12 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 251652#L2069-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 251650#L2945-4 assume !(-1 == ~expectedDirection~0); 251648#L2954-4 assume true; 251646#L2958-4 assume !(1 == ~expectedDirection~0); 251644#L2973-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 251643#L2071-4 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 251642#L1184-3 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 251641#L1236-11 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 251640#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 250318#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 251638#L2883-3 assume true; 251636#L2887-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 251635#L2894-3 assume true; 251634#L2898-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 251633#L2905-3 assume true; 251630#L2909-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 251629#L2916-3 assume true; 251627#L2920-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 251624#L2937-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 251622#L254-88 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 251619#L272-88 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 251618#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 251609#L1201-33 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 251606#L1222-33 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 251603#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 251296#L1809-3 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 251277#L1948-3 assume !(0 != timeShift_~tmp___9~2#1); 251276#L2039-3 assume !(1 == ~doorState~0); 251275#L2045-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 251273#L1388-7 assume !(1 == stopRequestedInDirection_~dir#1); 251270#L1557-7 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 251267#L1559-7 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 251200#L2047-3 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 251192#L1764-9 assume !(1 == ~currentHeading~0); 251183#L1774-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 251172#L1780-9 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 251167#L1785-9 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 251166#L2069-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 251155#L2945-3 assume !(-1 == ~expectedDirection~0); 251154#L2954-3 assume true; 251102#L2958-3 assume !(1 == ~expectedDirection~0); 251101#L2973-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 251094#L2071-3 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 251095#L1184-2 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 251089#L1236-8 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 251090#L2814-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 257788#L2815-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 270953#L2822-2 assume true; 270950#L2826-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 250905#L1201-24 assume !(0 == buttonForFloorIsPressed_~floorID#1); 250895#L1205-24 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 250885#L1222-24 assume true;__utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 250879#L2830-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 250876#L2937-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 250874#L254-67 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 250872#L272-67 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 250868#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 250853#L1201-22 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 250850#L1222-22 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 250847#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 250845#L1809-2 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 250841#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 250840#L2039-2 assume !(1 == ~doorState~0); 250824#L2045-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 250814#L1388-5 assume !(1 == stopRequestedInDirection_~dir#1); 250796#L1557-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 250793#L1559-5 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 250791#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 250792#L1764-6 assume !(1 == ~currentHeading~0); 253713#L1774-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 253711#L1780-6 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 253691#L1785-6 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 253690#L2069-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 271691#L2945-2 assume !(-1 == ~expectedDirection~0); 271689#L2954-2 assume true; 271687#L2958-2 assume !(1 == ~expectedDirection~0); 271685#L2973-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 271684#L2071-2 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 271683#L2571 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 271681#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 271676#L903 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 271675#L525 assume 0 == initPersonOnFloor_~floor#1; 271641#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 271640#L667 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 269831#L317 assume !(0 == callOnFloor_~floorID#1); 269832#L320 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 275099#L338 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 275098#L669 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 275092#L2504 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 275090#L1184-1 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 275088#L1236-5 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 275084#L2814-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 275082#L2815-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 275078#L2822-1 assume true; 273897#L2826-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 251054#L1201-13 assume !(0 == buttonForFloorIsPressed_~floorID#1); 251041#L1205-13 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 251034#L1222-13 assume true;__utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 251028#L2830-1 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 251025#L2937-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 251023#L254-46 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 251022#L272-46 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 251021#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 251018#L1201-11 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 251015#L1222-11 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 251013#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 251012#L1809-1 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 251010#L1948-1 assume !(0 != timeShift_~tmp___9~2#1); 251009#L2039-1 assume !(1 == ~doorState~0); 251008#L2045-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 251006#L1388-3 assume !(1 == stopRequestedInDirection_~dir#1); 251003#L1557-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 251004#L1559-3 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 268535#L2047-1 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 268416#L1764-3 assume !(1 == ~currentHeading~0); 268414#L1774-3 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 246985#L1780-3 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 268411#L1785-3 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 268408#L2069-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 268406#L2945-1 assume !(-1 == ~expectedDirection~0); 268404#L2954-1 assume true; 268402#L2958-1 assume !(1 == ~expectedDirection~0); 268400#L2973-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 263569#L2071-1 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 263565#L2586 [2024-11-17 08:39:29,188 INFO L747 eck$LassoCheckResult]: Loop: 263565#L2586 assume true; 263563#L2586-1 assume !false; 263559#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 263557#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 263556#L1035 assume true;cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 263552#L2594 assume 1 != cleanup_~tmp___0~8#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 263548#L254-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 263549#L272-25 assume true;anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 266292#L1292 assume !(0 != anyStopRequested_~tmp___3~0#1); 266293#L1296 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 274191#L1342 assume true;isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 274190#L1369 assume true;cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 274189#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 274188#L1184 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 274187#L1236-2 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 274185#L2814 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 274186#L2815 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 278151#L2822 assume true; 278149#L2826 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 263489#L1201-2 assume !(0 == buttonForFloorIsPressed_~floorID#1); 263487#L1205-2 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 263484#L1222-2 assume true;__utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 263465#L2830 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 263462#L2937 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 263458#L254-20 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 263457#L272-20 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 263456#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 263446#L1201 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 263444#L1222 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 263442#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 263441#L1809 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 263439#L1948 assume !(0 != timeShift_~tmp___9~2#1); 263437#L2039 assume 1 == ~doorState~0;~doorState~0 := 0; 263433#L2045 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 263429#L1388-1 assume !(1 == stopRequestedInDirection_~dir#1); 263347#L1557-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 244173#L1559-1 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 250370#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 250371#L1764 assume !(1 == ~currentHeading~0); 263610#L1774 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 263606#L1780 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 263593#L1785 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 263592#L2069 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 263585#L2945 assume !(-1 == ~expectedDirection~0); 263580#L2954 assume true; 263581#L2958 assume !(1 == ~expectedDirection~0); 266320#L2973 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 263570#L2071 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 263565#L2586 [2024-11-17 08:39:29,188 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:29,189 INFO L85 PathProgramCache]: Analyzing trace with hash 1271845669, now seen corresponding path program 1 times [2024-11-17 08:39:29,192 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:29,192 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1763236968] [2024-11-17 08:39:29,192 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:29,193 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:29,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:29,344 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:29,344 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:29,346 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1763236968] [2024-11-17 08:39:29,347 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1763236968] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:29,347 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:29,347 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:29,347 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [245980399] [2024-11-17 08:39:29,347 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:29,348 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:29,349 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:29,349 INFO L85 PathProgramCache]: Analyzing trace with hash 2016832332, now seen corresponding path program 1 times [2024-11-17 08:39:29,349 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:29,349 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1182175061] [2024-11-17 08:39:29,349 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:29,349 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:29,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:29,397 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:29,397 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:29,397 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1182175061] [2024-11-17 08:39:29,397 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1182175061] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:29,398 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:29,399 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-17 08:39:29,399 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [198198112] [2024-11-17 08:39:29,400 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:29,400 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:29,400 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:29,400 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-17 08:39:29,400 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-17 08:39:29,401 INFO L87 Difference]: Start difference. First operand 49409 states and 90683 transitions. cyclomatic complexity: 41275 Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:30,554 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:30,554 INFO L93 Difference]: Finished difference Result 97517 states and 179003 transitions. [2024-11-17 08:39:30,554 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 97517 states and 179003 transitions. [2024-11-17 08:39:31,023 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23892 [2024-11-17 08:39:31,262 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 97517 states to 97517 states and 179003 transitions. [2024-11-17 08:39:31,262 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 97517 [2024-11-17 08:39:31,328 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 97517 [2024-11-17 08:39:31,328 INFO L73 IsDeterministic]: Start isDeterministic. Operand 97517 states and 179003 transitions. [2024-11-17 08:39:31,532 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:31,532 INFO L218 hiAutomatonCegarLoop]: Abstraction has 97517 states and 179003 transitions. [2024-11-17 08:39:31,597 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97517 states and 179003 transitions. [2024-11-17 08:39:32,436 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97517 to 97493. [2024-11-17 08:39:32,523 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97493 states, 97493 states have (on average 1.8358138533022883) internal successors, (178979), 97492 states have internal predecessors, (178979), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:32,927 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97493 states to 97493 states and 178979 transitions. [2024-11-17 08:39:32,927 INFO L240 hiAutomatonCegarLoop]: Abstraction has 97493 states and 178979 transitions. [2024-11-17 08:39:32,937 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-17 08:39:32,938 INFO L425 stractBuchiCegarLoop]: Abstraction has 97493 states and 178979 transitions. [2024-11-17 08:39:32,938 INFO L332 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2024-11-17 08:39:32,938 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 97493 states and 178979 transitions. [2024-11-17 08:39:33,156 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23886 [2024-11-17 08:39:33,157 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:33,157 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:33,159 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:33,159 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:33,160 INFO L745 eck$LassoCheckResult]: Stem: 396405#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 396406#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 393133#L2430 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 391345#L2423 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 391346#L2438 assume true;main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 392698#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 392699#L2754 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 394001#L247 assume true;assume { :end_inline_initFloors } true; 394002#L1004 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 394622#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 393149#L903-1 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 395647#L525-1 assume 0 == initPersonOnFloor_~floor#1; 397295#L526-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 390746#L667-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 395878#L317-1 assume !(0 == callOnFloor_~floorID#1); 393209#L320-1 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 393210#L338-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 397901#L669-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 397900#L2504-1 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 397899#L1184-4 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 397898#L1236-14 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 397897#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 397896#L2876-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 397891#L1201-50 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 394780#L1222-50 assume true;__utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 394781#L2880-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 397439#L2937-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 397440#L254-109 assume !(0 == isFloorCalling_~floorID#1); 391130#L258-109 assume !(1 == isFloorCalling_~floorID#1); 391131#L262-109 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 391738#L272-109 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 391739#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 397477#L1201-44 assume !(0 == buttonForFloorIsPressed_~floorID#1); 397478#L1205-44 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 397872#L1222-44 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 397870#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 397869#L1809-4 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 397867#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 397866#L2039-4 assume !(1 == ~doorState~0); 397865#L2045-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 397864#L1388-9 assume !(1 == stopRequestedInDirection_~dir#1); 397863#L1557-9 assume !(0 == ~currentFloorID~0); 397862#L1563-9 assume ~currentFloorID~0 > 0; 397861#L1564-9 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 397860#L254-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 395644#L272-104 assume true;stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 395645#L1568-9 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 397777#L1559-9 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 397775#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 397776#L1764-12 assume !(1 == ~currentHeading~0); 410553#L1774-12 assume !(0 == ~currentFloorID~0); 410551#L1780-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 410548#L1785-12 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 410547#L2069-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 410545#L2945-4 assume !(-1 == ~expectedDirection~0); 410543#L2954-4 assume true; 410541#L2958-4 assume !(1 == ~expectedDirection~0); 410536#L2973-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 410535#L2071-4 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 410534#L1184-3 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 410531#L1236-11 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 410530#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 397660#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 410525#L2883-3 assume true; 410522#L2887-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 410520#L2894-3 assume true; 410518#L2898-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 410517#L2905-3 assume true; 410515#L2909-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 410514#L2916-3 assume true; 410512#L2920-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 410511#L2937-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 410509#L254-88 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 410508#L272-88 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 410507#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 410503#L1201-33 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 410499#L1222-33 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 410497#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 410496#L1809-3 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 410491#L1948-3 assume !(0 != timeShift_~tmp___9~2#1); 410489#L2039-3 assume !(1 == ~doorState~0); 410487#L2045-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 410485#L1388-7 assume !(1 == stopRequestedInDirection_~dir#1); 410482#L1557-7 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 410477#L1559-7 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 410475#L2047-3 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 410196#L1764-9 assume !(1 == ~currentHeading~0); 409751#L1774-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 409746#L1780-9 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 409627#L1785-9 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 409626#L2069-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 414236#L2945-3 assume !(-1 == ~expectedDirection~0); 414231#L2954-3 assume true; 414228#L2958-3 assume !(1 == ~expectedDirection~0); 414223#L2973-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 414221#L2071-3 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 414219#L1184-2 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 414217#L1236-8 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 414214#L2814-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 414211#L2815-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 414209#L2822-2 assume true; 414205#L2826-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 402488#L1201-24 assume !(0 == buttonForFloorIsPressed_~floorID#1); 402478#L1205-24 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 402468#L1222-24 assume true;__utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 402462#L2830-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 402459#L2937-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 402457#L254-67 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 402456#L272-67 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 402455#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 402451#L1201-22 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 402449#L1222-22 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 402447#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 402446#L1809-2 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 402445#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 402441#L2039-2 assume !(1 == ~doorState~0); 402400#L2045-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 402388#L1388-5 assume !(1 == stopRequestedInDirection_~dir#1); 402390#L1557-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 414478#L1559-5 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 425996#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 397490#L1764-6 assume !(1 == ~currentHeading~0); 397251#L1774-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 429605#L1780-6 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 392861#L1785-6 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 392862#L2069-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 486380#L2945-2 assume !(-1 == ~expectedDirection~0); 486378#L2954-2 assume true; 486376#L2958-2 assume !(1 == ~expectedDirection~0); 486374#L2973-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 486373#L2071-2 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 486372#L2571 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 435852#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 435846#L903 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 435844#L525 assume 0 == initPersonOnFloor_~floor#1; 433718#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 433717#L667 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 433715#L317 assume !(0 == callOnFloor_~floorID#1); 433711#L320 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 433710#L338 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 433709#L669 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 433708#L2504 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 433707#L1184-1 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 433706#L1236-5 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 431823#L2814-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 431824#L2815-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 433638#L2822-1 assume true; 433630#L2826-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 431202#L1201-13 assume !(0 == buttonForFloorIsPressed_~floorID#1); 430998#L1205-13 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 430995#L1222-13 assume true;__utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 430926#L2830-1 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 430743#L2937-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 430589#L254-46 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 430590#L272-46 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 431353#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 431344#L1201-11 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 431338#L1222-11 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 431327#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 431324#L1809-1 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 430497#L1948-1 assume !(0 != timeShift_~tmp___9~2#1); 430499#L2039-1 assume !(1 == ~doorState~0); 396504#L2045-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 396505#L1388-3 assume !(1 == stopRequestedInDirection_~dir#1); 429946#L1557-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 394032#L1559-3 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 430007#L2047-1 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 430008#L1764-3 assume !(1 == ~currentHeading~0); 440379#L1774-3 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 440377#L1780-3 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 440376#L1785-3 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 440374#L2069-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 440372#L2945-1 assume !(-1 == ~expectedDirection~0); 440370#L2954-1 assume true; 440368#L2958-1 assume !(1 == ~expectedDirection~0); 440366#L2973-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 433964#L2071-1 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 433960#L2586 [2024-11-17 08:39:33,161 INFO L747 eck$LassoCheckResult]: Loop: 433960#L2586 assume true; 433958#L2586-1 assume !false; 433956#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 433954#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 433951#L1035 assume true;cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 433950#L2594 assume 1 != cleanup_~tmp___0~8#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 433948#L254-25 assume !(0 == isFloorCalling_~floorID#1); 433947#L258-25 assume !(1 == isFloorCalling_~floorID#1); 433913#L262-25 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 433908#L272-25 assume true;anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 431839#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 431840#L1342 assume true;isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 438500#L1369 assume true;cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 438498#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 438482#L1184 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 438479#L1236-2 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 438480#L2814 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 448026#L2815 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 449132#L2822 assume true; 449129#L2826 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 394482#L1201-2 assume !(0 == buttonForFloorIsPressed_~floorID#1); 394483#L1205-2 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 431194#L1222-2 assume true;__utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 431188#L2830 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 431184#L2937 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 431180#L254-20 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 431179#L272-20 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 431178#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 430982#L1201 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 430979#L1222 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 430976#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 430973#L1809 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 430970#L1948 assume !(0 != timeShift_~tmp___9~2#1); 430923#L2039 assume 1 == ~doorState~0;~doorState~0 := 0; 430502#L2045 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 430483#L1388-1 assume !(1 == stopRequestedInDirection_~dir#1); 428903#L1557-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 428904#L1559-1 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 429499#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 429500#L1764 assume !(1 == ~currentHeading~0); 434014#L1774 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 434011#L1780 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 434008#L1785 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 434006#L2069 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 434004#L2945 assume !(-1 == ~expectedDirection~0); 434002#L2954 assume true; 434000#L2958 assume !(1 == ~expectedDirection~0); 433967#L2973 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 433965#L2071 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 433960#L2586 [2024-11-17 08:39:33,161 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:33,161 INFO L85 PathProgramCache]: Analyzing trace with hash 957716568, now seen corresponding path program 1 times [2024-11-17 08:39:33,162 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:33,162 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2068815943] [2024-11-17 08:39:33,162 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:33,162 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:33,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:33,251 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:33,251 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:33,251 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2068815943] [2024-11-17 08:39:33,251 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2068815943] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:33,251 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:33,251 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:33,251 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [582537085] [2024-11-17 08:39:33,252 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:33,252 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:33,252 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:33,252 INFO L85 PathProgramCache]: Analyzing trace with hash -1664281089, now seen corresponding path program 1 times [2024-11-17 08:39:33,252 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:33,252 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1803664050] [2024-11-17 08:39:33,252 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:33,252 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:33,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:33,274 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:33,274 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:33,274 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1803664050] [2024-11-17 08:39:33,274 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1803664050] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:33,274 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:33,275 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-17 08:39:33,275 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [571315383] [2024-11-17 08:39:33,275 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:33,275 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:33,275 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:33,276 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-17 08:39:33,276 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-17 08:39:33,276 INFO L87 Difference]: Start difference. First operand 97493 states and 178979 transitions. cyclomatic complexity: 81487 Second operand has 3 states, 3 states have (on average 16.333333333333332) internal successors, (49), 3 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:34,306 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:34,306 INFO L93 Difference]: Finished difference Result 96541 states and 177203 transitions. [2024-11-17 08:39:34,306 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 96541 states and 177203 transitions. [2024-11-17 08:39:34,922 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23310 [2024-11-17 08:39:35,204 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 96541 states to 96541 states and 177203 transitions. [2024-11-17 08:39:35,204 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 96541 [2024-11-17 08:39:35,285 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 96541 [2024-11-17 08:39:35,285 INFO L73 IsDeterministic]: Start isDeterministic. Operand 96541 states and 177203 transitions. [2024-11-17 08:39:35,356 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:35,357 INFO L218 hiAutomatonCegarLoop]: Abstraction has 96541 states and 177203 transitions. [2024-11-17 08:39:35,425 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96541 states and 177203 transitions. [2024-11-17 08:39:36,598 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96541 to 96541. [2024-11-17 08:39:36,685 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96541 states, 96541 states have (on average 1.8355206596161215) internal successors, (177203), 96540 states have internal predecessors, (177203), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:36,851 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96541 states to 96541 states and 177203 transitions. [2024-11-17 08:39:36,851 INFO L240 hiAutomatonCegarLoop]: Abstraction has 96541 states and 177203 transitions. [2024-11-17 08:39:36,851 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-17 08:39:36,852 INFO L425 stractBuchiCegarLoop]: Abstraction has 96541 states and 177203 transitions. [2024-11-17 08:39:36,852 INFO L332 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2024-11-17 08:39:36,852 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 96541 states and 177203 transitions. [2024-11-17 08:39:37,076 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23310 [2024-11-17 08:39:37,077 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:37,077 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:37,079 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:37,079 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:37,079 INFO L745 eck$LassoCheckResult]: Stem: 590347#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 590348#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 587126#L2430 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 585381#L2423 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 585382#L2438 assume true;main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 586697#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 586698#L2754 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 587987#L247 assume true;assume { :end_inline_initFloors } true; 587988#L1004 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 588596#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 587141#L903-1 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 589620#L525-1 assume 0 == initPersonOnFloor_~floor#1; 591240#L526-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 584788#L667-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 589852#L317-1 assume !(0 == callOnFloor_~floorID#1); 587202#L320-1 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 585077#L338-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 585078#L669-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 589700#L2504-1 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 590943#L1184-4 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 589420#L1236-14 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 589421#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 590034#L2876-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 587271#L1201-50 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 584976#L1222-50 assume true;__utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 588759#L2880-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 587917#L2937-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 589966#L254-109 assume !(0 == isFloorCalling_~floorID#1); 585164#L258-109 assume !(1 == isFloorCalling_~floorID#1); 585165#L262-109 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 585761#L272-109 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 585762#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 590472#L1201-44 assume !(0 == buttonForFloorIsPressed_~floorID#1); 590572#L1205-44 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 590441#L1222-44 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 585791#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 585792#L1809-4 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 591399#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 591359#L2039-4 assume !(1 == ~doorState~0); 588876#L2045-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 588877#L1388-9 assume !(1 == stopRequestedInDirection_~dir#1); 590409#L1557-9 assume !(0 == ~currentFloorID~0); 587191#L1563-9 assume ~currentFloorID~0 > 0; 587192#L1564-9 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 588966#L254-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 588967#L272-104 assume true;stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 585369#L1568-9 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 585370#L1559-9 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 593876#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 593877#L1764-12 assume !(1 == ~currentHeading~0); 595199#L1774-12 assume !(0 == ~currentFloorID~0); 595197#L1780-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 595194#L1785-12 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 595193#L2069-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 595185#L2945-4 assume !(-1 == ~expectedDirection~0); 595180#L2954-4 assume true; 595177#L2958-4 assume !(1 == ~expectedDirection~0); 595174#L2973-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 595171#L2071-4 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 595170#L1184-3 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 595169#L1236-11 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 594918#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 594915#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 594913#L2883-3 assume true; 594911#L2887-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 594908#L2894-3 assume true; 594906#L2898-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 594905#L2905-3 assume true; 594903#L2909-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 594899#L2916-3 assume true; 594897#L2920-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 594894#L2937-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 593229#L254-88 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 592013#L272-88 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 592012#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 591988#L1201-33 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 591986#L1222-33 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 591983#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 591981#L1809-3 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 591979#L1948-3 assume !(0 != timeShift_~tmp___9~2#1); 591978#L2039-3 assume !(1 == ~doorState~0); 591977#L2045-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 591975#L1388-7 assume !(1 == stopRequestedInDirection_~dir#1); 591971#L1557-7 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 591720#L1559-7 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 591676#L2047-3 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 591653#L1764-9 assume !(1 == ~currentHeading~0); 591642#L1774-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 591629#L1780-9 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 591623#L1785-9 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 591619#L2069-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 591620#L2945-3 assume !(-1 == ~expectedDirection~0); 602973#L2954-3 assume true; 602971#L2958-3 assume !(1 == ~expectedDirection~0); 602969#L2973-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 602968#L2071-3 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 602967#L1184-2 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 602966#L1236-8 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 591592#L2814-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 591589#L2815-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 591587#L2822-2 assume true; 591533#L2826-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 591528#L1201-24 assume !(0 == buttonForFloorIsPressed_~floorID#1); 591518#L1205-24 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 591508#L1222-24 assume true;__utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 591502#L2830-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 591499#L2937-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 591497#L254-67 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 591496#L272-67 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 591495#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 591491#L1201-22 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 591489#L1222-22 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 591487#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 591486#L1809-2 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 591484#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 591483#L2039-2 assume !(1 == ~doorState~0); 591482#L2045-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 591479#L1388-5 assume !(1 == stopRequestedInDirection_~dir#1); 591481#L1557-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 600542#L1559-5 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 600540#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 600537#L1764-6 assume !(1 == ~currentHeading~0); 600531#L1774-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 600526#L1780-6 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 600522#L1785-6 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 600520#L2069-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 600518#L2945-2 assume !(-1 == ~expectedDirection~0); 600516#L2954-2 assume true; 600514#L2958-2 assume !(1 == ~expectedDirection~0); 600512#L2973-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 600511#L2071-2 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 600510#L2571 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 600508#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 600503#L903 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 600501#L525 assume 0 == initPersonOnFloor_~floor#1; 600436#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 600433#L667 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 600428#L317 assume !(0 == callOnFloor_~floorID#1); 600423#L320 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 600421#L338 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 600419#L669 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 600417#L2504 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 600415#L1184-1 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 600384#L1236-5 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 600380#L2814-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 600381#L2815-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 602685#L2822-1 assume true; 602681#L2826-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 602676#L1201-13 assume !(0 == buttonForFloorIsPressed_~floorID#1); 602663#L1205-13 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 602656#L1222-13 assume true;__utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 602650#L2830-1 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 602647#L2937-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 602646#L254-46 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 602645#L272-46 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 602644#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 602641#L1201-11 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 602638#L1222-11 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 602636#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 602635#L1809-1 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 602633#L1948-1 assume !(0 != timeShift_~tmp___9~2#1); 602611#L2039-1 assume !(1 == ~doorState~0); 602612#L2045-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 599945#L1388-3 assume !(1 == stopRequestedInDirection_~dir#1); 599947#L1557-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 600159#L1559-3 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 625534#L2047-1 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 625535#L1764-3 assume !(1 == ~currentHeading~0); 630196#L1774-3 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 630172#L1780-3 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 630131#L1785-3 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 630127#L2069-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 630124#L2945-1 assume !(-1 == ~expectedDirection~0); 630117#L2954-1 assume true; 630111#L2958-1 assume !(1 == ~expectedDirection~0); 630109#L2973-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 630108#L2071-1 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 629507#L2586 [2024-11-17 08:39:37,080 INFO L747 eck$LassoCheckResult]: Loop: 629507#L2586 assume true; 629508#L2586-1 assume !false; 629501#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 629502#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 629495#L1035 assume true;cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 629496#L2594 assume 1 != cleanup_~tmp___0~8#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 629489#L254-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 629490#L272-25 assume true;anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 629482#L1292 assume !(0 != anyStopRequested_~tmp___3~0#1); 629484#L1296 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 630100#L254-24 assume !(0 == isFloorCalling_~floorID#1); 630101#L258-24 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 630090#L272-24 assume true;anyStopRequested_#t~ret12#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret12#1;havoc anyStopRequested_#t~ret12#1; 630091#L1303 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 657629#L1342 assume true;isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 657627#L1369 assume true;cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 657625#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 657623#L1184 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 657621#L1236-2 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 657618#L2814 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 657616#L2815 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 657614#L2822 assume true; 657611#L2826 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 628004#L1201-2 assume !(0 == buttonForFloorIsPressed_~floorID#1); 628002#L1205-2 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 627999#L1222-2 assume true;__utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 627978#L2830 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 627975#L2937 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 627973#L254-20 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 627972#L272-20 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 627971#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 627955#L1201 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 627952#L1222 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 627949#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 627948#L1809 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 627946#L1948 assume !(0 != timeShift_~tmp___9~2#1); 627945#L2039 assume 1 == ~doorState~0;~doorState~0 := 0; 627944#L2045 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 625146#L1388-1 assume !(1 == stopRequestedInDirection_~dir#1); 625148#L1557-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 591229#L1559-1 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 591272#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 627124#L1764 assume !(1 == ~currentHeading~0); 629991#L1774 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 629595#L1780 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 629596#L1785 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 630119#L2069 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 629538#L2945 assume !(-1 == ~expectedDirection~0); 629533#L2954 assume true; 629534#L2958 assume !(1 == ~expectedDirection~0); 629515#L2973 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 629516#L2071 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 629507#L2586 [2024-11-17 08:39:37,081 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:37,081 INFO L85 PathProgramCache]: Analyzing trace with hash 957716568, now seen corresponding path program 2 times [2024-11-17 08:39:37,081 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:37,081 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1694420848] [2024-11-17 08:39:37,081 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:37,082 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:37,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:37,167 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:37,168 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:37,168 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1694420848] [2024-11-17 08:39:37,168 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1694420848] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:37,168 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:37,168 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:37,168 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1088339972] [2024-11-17 08:39:37,168 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:37,168 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:37,169 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:37,169 INFO L85 PathProgramCache]: Analyzing trace with hash -1794860424, now seen corresponding path program 1 times [2024-11-17 08:39:37,169 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:37,169 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [112764451] [2024-11-17 08:39:37,169 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:37,169 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:37,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:37,225 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:37,225 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:37,225 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [112764451] [2024-11-17 08:39:37,225 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [112764451] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:37,225 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:37,226 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-17 08:39:37,226 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1040328062] [2024-11-17 08:39:37,226 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:37,226 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:37,226 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:37,227 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-17 08:39:37,227 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-17 08:39:37,227 INFO L87 Difference]: Start difference. First operand 96541 states and 177203 transitions. cyclomatic complexity: 80663 Second operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 6 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:38,285 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:38,285 INFO L93 Difference]: Finished difference Result 95525 states and 175347 transitions. [2024-11-17 08:39:38,285 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 95525 states and 175347 transitions. [2024-11-17 08:39:38,945 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23056 [2024-11-17 08:39:39,212 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 95525 states to 95525 states and 175347 transitions. [2024-11-17 08:39:39,212 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 95525 [2024-11-17 08:39:39,276 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 95525 [2024-11-17 08:39:39,276 INFO L73 IsDeterministic]: Start isDeterministic. Operand 95525 states and 175347 transitions. [2024-11-17 08:39:39,336 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:39,337 INFO L218 hiAutomatonCegarLoop]: Abstraction has 95525 states and 175347 transitions. [2024-11-17 08:39:39,389 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95525 states and 175347 transitions. [2024-11-17 08:39:40,322 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95525 to 95461. [2024-11-17 08:39:40,402 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 95461 states, 95461 states have (on average 1.8359225233341365) internal successors, (175259), 95460 states have internal predecessors, (175259), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:40,556 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95461 states to 95461 states and 175259 transitions. [2024-11-17 08:39:40,556 INFO L240 hiAutomatonCegarLoop]: Abstraction has 95461 states and 175259 transitions. [2024-11-17 08:39:40,558 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-17 08:39:40,559 INFO L425 stractBuchiCegarLoop]: Abstraction has 95461 states and 175259 transitions. [2024-11-17 08:39:40,559 INFO L332 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2024-11-17 08:39:40,559 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 95461 states and 175259 transitions. [2024-11-17 08:39:41,162 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23040 [2024-11-17 08:39:41,162 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:41,162 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:41,164 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:41,164 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:41,166 INFO L745 eck$LassoCheckResult]: Stem: 782442#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 782443#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 779215#L2430 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 777458#L2423 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 777459#L2438 assume true;main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 778785#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 778786#L2754 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 780078#L247 assume true;assume { :end_inline_initFloors } true; 780079#L1004 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 780683#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 779230#L903-1 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 781704#L525-1 assume 0 == initPersonOnFloor_~floor#1; 783344#L526-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 776871#L667-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 781939#L317-1 assume !(0 == callOnFloor_~floorID#1); 779292#L320-1 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 777154#L338-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 777155#L669-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 781781#L2504-1 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 783042#L1184-4 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 781509#L1236-14 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 781510#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 782133#L2876-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 779363#L1201-50 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 777056#L1222-50 assume true;__utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 780842#L2880-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 780008#L2937-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 782062#L254-109 assume !(0 == isFloorCalling_~floorID#1); 777245#L258-109 assume !(1 == isFloorCalling_~floorID#1); 777246#L262-109 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 777843#L272-109 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 777844#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 782563#L1201-44 assume !(0 == buttonForFloorIsPressed_~floorID#1); 782664#L1205-44 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 782531#L1222-44 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 777873#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 777874#L1809-4 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 783513#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 783465#L2039-4 assume !(1 == ~doorState~0); 780956#L2045-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 780957#L1388-9 assume !(1 == stopRequestedInDirection_~dir#1); 782500#L1557-9 assume !(0 == ~currentFloorID~0); 779281#L1563-9 assume ~currentFloorID~0 > 0; 779282#L1564-9 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 781041#L254-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 781042#L272-104 assume true;stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 777448#L1568-9 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 776944#L1559-9 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 783582#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 783583#L1764-12 assume !(1 == ~currentHeading~0); 788786#L1774-12 assume !(0 == ~currentFloorID~0); 788784#L1780-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 788781#L1785-12 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 788779#L2069-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 788777#L2945-4 assume !(-1 == ~expectedDirection~0); 788775#L2954-4 assume true; 788773#L2958-4 assume !(1 == ~expectedDirection~0); 788766#L2973-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 788764#L2071-4 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 788763#L1184-3 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 788756#L1236-11 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 788754#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 788751#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 788750#L2883-3 assume true; 788749#L2887-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 788748#L2894-3 assume true; 788746#L2898-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 788745#L2905-3 assume true; 788744#L2909-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 788743#L2916-3 assume true; 788742#L2920-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 788741#L2937-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 788739#L254-88 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 788738#L272-88 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 788737#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 788733#L1201-33 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 788731#L1222-33 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 788727#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 788726#L1809-3 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 788722#L1948-3 assume !(0 != timeShift_~tmp___9~2#1); 788723#L2039-3 assume !(1 == ~doorState~0); 790235#L2045-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 790231#L1388-7 assume !(1 == stopRequestedInDirection_~dir#1); 789635#L1557-7 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 789636#L1559-7 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 789955#L2047-3 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 789956#L1764-9 assume !(1 == ~currentHeading~0); 798917#L1774-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 787269#L1780-9 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 798914#L1785-9 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 798912#L2069-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 798910#L2945-3 assume !(-1 == ~expectedDirection~0); 798908#L2954-3 assume true; 798902#L2958-3 assume !(1 == ~expectedDirection~0); 798900#L2973-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 798899#L2071-3 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 798898#L1184-2 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 798897#L1236-8 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 798896#L2814-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 798895#L2815-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 779813#L1201-23 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 779429#L1222-23 assume true;__utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 779953#L2819-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 798617#L2937-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 798615#L254-67 assume !(0 == isFloorCalling_~floorID#1); 798613#L258-67 assume !(1 == isFloorCalling_~floorID#1); 798606#L262-67 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 798594#L272-67 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 798593#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 798591#L1201-22 assume !(0 == buttonForFloorIsPressed_~floorID#1); 798577#L1205-22 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 798546#L1222-22 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 798539#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 797925#L1809-2 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 790295#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 790294#L2039-2 assume !(1 == ~doorState~0); 790293#L2045-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 790292#L1388-5 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 790291#L828-14 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 787000#L1392-5 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 785495#L1559-5 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 783852#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 783827#L1764-6 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 783821#L828-10 assume true;continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1; 783814#L1768-6 assume !(0 != continueInDirection_~tmp~6#1); 783815#L1780-6 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 824206#L1785-6 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 824204#L2069-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 824202#L2945-2 assume !(-1 == ~expectedDirection~0); 824200#L2954-2 assume true; 824198#L2958-2 assume !(1 == ~expectedDirection~0); 824196#L2973-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 824195#L2071-2 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 824194#L2571 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 824185#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 824180#L903 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 824173#L525 assume 0 == initPersonOnFloor_~floor#1; 818378#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 818377#L667 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 818316#L317 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 818315#L338 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 818314#L669 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 818313#L2504 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 818312#L1184-1 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 818311#L1236-5 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 818310#L2814-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 818308#L2815-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 818309#L1201-12 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 826177#L1222-12 assume true;__utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 825844#L2819-1 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 815855#L2937-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 816481#L254-46 assume !(0 == isFloorCalling_~floorID#1); 816480#L258-46 assume !(1 == isFloorCalling_~floorID#1); 816476#L262-46 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 816470#L272-46 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 816463#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 816459#L1201-11 assume !(0 == buttonForFloorIsPressed_~floorID#1); 816457#L1205-11 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 816454#L1222-11 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 816452#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 816451#L1809-1 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 814677#L1948-1 assume !(0 != timeShift_~tmp___9~2#1); 814676#L2039-1 assume !(1 == ~doorState~0); 814671#L2045-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 814670#L1388-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 814669#L828-9 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 814667#L1392-3 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 814655#L1559-3 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 815066#L2047-1 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 815060#L1764-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 815052#L828-5 assume true;continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1; 815047#L1768-3 assume !(0 != continueInDirection_~tmp~6#1); 815041#L1780-3 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 815033#L1785-3 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 815031#L2069-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 865447#L2945-1 assume !(-1 == ~expectedDirection~0); 865445#L2954-1 assume true; 865443#L2958-1 assume !(1 == ~expectedDirection~0); 865441#L2973-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 865431#L2071-1 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 865430#L2586 [2024-11-17 08:39:41,167 INFO L747 eck$LassoCheckResult]: Loop: 865430#L2586 assume true; 865429#L2586-1 assume !false; 865428#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 865427#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 865426#L1035 assume true;cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 865425#L2594 assume 1 != cleanup_~tmp___0~8#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 865424#L254-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 865423#L272-25 assume true;anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 865422#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 860447#L1342 assume true;isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 865421#L1369 assume true;cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 865420#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 865419#L1184 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 865418#L1236-2 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 865417#L2814 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 865416#L2815 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 814830#L1201-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 814860#L1222-1 assume true;__utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 814856#L2819 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 814820#L2937 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 814839#L254-20 assume !(0 == isFloorCalling_~floorID#1); 814838#L258-20 assume !(1 == isFloorCalling_~floorID#1); 814786#L262-20 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 814785#L272-20 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 814781#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 814782#L1201 assume !(0 == buttonForFloorIsPressed_~floorID#1); 819127#L1205 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 819125#L1222 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 814750#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 814745#L1809 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 814627#L1948 assume !(0 != timeShift_~tmp___9~2#1); 814626#L2039 assume 1 == ~doorState~0;~doorState~0 := 0; 814622#L2045 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 814434#L1388-1 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 814417#L828-4 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 814416#L1392-1 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 814411#L1559-1 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 814414#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 814415#L1764 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 818305#L828 assume true;continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1; 818299#L1768 assume !(0 != continueInDirection_~tmp~6#1); 818290#L1780 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 818286#L1785 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 818285#L2069 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 865439#L2945 assume !(-1 == ~expectedDirection~0); 865437#L2954 assume true; 865435#L2958 assume !(1 == ~expectedDirection~0); 865433#L2973 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 865432#L2071 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 865430#L2586 [2024-11-17 08:39:41,167 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:41,167 INFO L85 PathProgramCache]: Analyzing trace with hash 646323185, now seen corresponding path program 1 times [2024-11-17 08:39:41,167 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:41,168 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1366373453] [2024-11-17 08:39:41,168 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:41,168 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:41,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:41,338 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:41,342 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:41,342 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1366373453] [2024-11-17 08:39:41,342 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1366373453] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:41,342 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:41,342 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:41,342 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1469422635] [2024-11-17 08:39:41,342 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:41,343 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:41,343 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:41,343 INFO L85 PathProgramCache]: Analyzing trace with hash 1501186024, now seen corresponding path program 1 times [2024-11-17 08:39:41,343 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:41,343 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1406729041] [2024-11-17 08:39:41,343 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:41,343 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:41,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:41,406 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:41,406 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:41,407 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1406729041] [2024-11-17 08:39:41,407 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1406729041] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:41,407 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:41,407 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-17 08:39:41,407 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [572746874] [2024-11-17 08:39:41,407 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:41,407 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:41,407 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:41,408 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-17 08:39:41,408 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-17 08:39:41,408 INFO L87 Difference]: Start difference. First operand 95461 states and 175259 transitions. cyclomatic complexity: 79799 Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 6 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:44,593 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:44,593 INFO L93 Difference]: Finished difference Result 140377 states and 257102 transitions. [2024-11-17 08:39:44,593 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 140377 states and 257102 transitions. [2024-11-17 08:39:45,083 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 34334 [2024-11-17 08:39:45,870 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 140377 states to 140377 states and 257102 transitions. [2024-11-17 08:39:45,870 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 140377 [2024-11-17 08:39:45,975 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 140377 [2024-11-17 08:39:45,976 INFO L73 IsDeterministic]: Start isDeterministic. Operand 140377 states and 257102 transitions. [2024-11-17 08:39:46,069 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:46,069 INFO L218 hiAutomatonCegarLoop]: Abstraction has 140377 states and 257102 transitions. [2024-11-17 08:39:46,153 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 140377 states and 257102 transitions. [2024-11-17 08:39:47,525 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 140377 to 135899. [2024-11-17 08:39:47,632 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 135899 states, 135899 states have (on average 1.8417795568767983) internal successors, (250296), 135898 states have internal predecessors, (250296), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:47,873 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 135899 states to 135899 states and 250296 transitions. [2024-11-17 08:39:47,874 INFO L240 hiAutomatonCegarLoop]: Abstraction has 135899 states and 250296 transitions. [2024-11-17 08:39:47,874 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-11-17 08:39:47,874 INFO L425 stractBuchiCegarLoop]: Abstraction has 135899 states and 250296 transitions. [2024-11-17 08:39:47,874 INFO L332 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2024-11-17 08:39:47,874 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 135899 states and 250296 transitions. [2024-11-17 08:39:48,716 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 33214 [2024-11-17 08:39:48,716 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:48,716 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:48,718 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:48,718 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:48,718 INFO L745 eck$LassoCheckResult]: Stem: 1018270#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1018271#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 1015061#L2430 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1013311#L2423 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 1013312#L2438 assume true;main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 1014634#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 1014635#L2754 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1015930#L247 assume true;assume { :end_inline_initFloors } true; 1015931#L1004 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1016530#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 1015078#L903-1 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1017545#L525-1 assume 0 == initPersonOnFloor_~floor#1; 1019148#L526-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1012727#L667-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1017781#L317-1 assume !(0 == callOnFloor_~floorID#1); 1015137#L320-1 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1015138#L338-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1040637#L669-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1040636#L2504-1 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1040635#L1184-4 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1040634#L1236-14 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1040633#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1040632#L2876-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1040631#L1201-50 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1040626#L1222-50 assume true;__utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 1017729#L2880-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 1015859#L2937-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1017897#L254-109 assume !(0 == isFloorCalling_~floorID#1); 1013098#L258-109 assume !(1 == isFloorCalling_~floorID#1); 1013099#L262-109 assume !(2 == isFloorCalling_~floorID#1); 1013928#L266-109 assume 3 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_3~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1013696#L272-109 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1013697#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1018393#L1201-44 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1018483#L1205-44 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1018362#L1222-44 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1013727#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1013728#L1809-4 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1019337#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 1019284#L2039-4 assume !(1 == ~doorState~0); 1016802#L2045-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1016803#L1388-9 assume !(1 == stopRequestedInDirection_~dir#1); 1018329#L1557-9 assume !(0 == ~currentFloorID~0); 1015127#L1563-9 assume ~currentFloorID~0 > 0; 1015128#L1564-9 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1016887#L254-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1016888#L272-104 assume true;stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1013301#L1568-9 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1012800#L1559-9 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1019357#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1018808#L1764-12 assume !(1 == ~currentHeading~0); 1018809#L1774-12 assume !(0 == ~currentFloorID~0); 1019019#L1780-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1043230#L1785-12 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1043228#L2069-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1043225#L2945-4 assume !(-1 == ~expectedDirection~0); 1043222#L2954-4 assume true; 1043178#L2958-4 assume !(1 == ~expectedDirection~0); 1043175#L2973-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1043169#L2071-4 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1043168#L1184-3 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1043166#L1236-11 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1043159#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1043156#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 1043153#L2883-3 assume true; 1043148#L2887-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 1043146#L2894-3 assume true; 1043145#L2898-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 1043144#L2905-3 assume true; 1043143#L2909-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 1043142#L2916-3 assume true; 1043138#L2920-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 1043137#L2937-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1043135#L254-88 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1043134#L272-88 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1043133#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1043098#L1201-33 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1043095#L1222-33 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1042631#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1042630#L1809-3 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1042629#L1948-3 assume !(0 != timeShift_~tmp___9~2#1); 1042205#L2039-3 assume !(1 == ~doorState~0); 1042204#L2045-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1042127#L1388-7 assume !(1 == stopRequestedInDirection_~dir#1); 1042115#L1557-7 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1042110#L1559-7 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1042102#L2047-3 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1042096#L1764-9 assume !(1 == ~currentHeading~0); 1042094#L1774-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1035094#L1780-9 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1042083#L1785-9 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1042082#L2069-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1067632#L2945-3 assume !(-1 == ~expectedDirection~0); 1067630#L2954-3 assume true; 1067628#L2958-3 assume !(1 == ~expectedDirection~0); 1067626#L2973-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1067625#L2071-3 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1067624#L1184-2 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1067623#L1236-8 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1067622#L2814-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 1067621#L2815-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 1067620#L2822-2 assume true; 1067619#L2826-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1041453#L1201-24 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1041443#L1205-24 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1041433#L1222-24 assume true;__utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 1041427#L2830-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 1041424#L2937-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1041422#L254-67 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1041417#L272-67 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1041414#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1041415#L1201-22 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1041416#L1222-22 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1041412#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1041402#L1809-2 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1041403#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 1041594#L2039-2 assume !(1 == ~doorState~0); 1041592#L2045-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1041590#L1388-5 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1041587#L828-14 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 1041560#L1392-5 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1041537#L1559-5 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1041529#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1030281#L1764-6 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1030279#L828-10 assume true;continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1; 1030275#L1768-6 assume 0 != continueInDirection_~tmp~6#1;~currentHeading~0 := 0; 1016824#L1780-6 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1045633#L1785-6 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1045632#L2069-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1045626#L2945-2 assume !(-1 == ~expectedDirection~0); 1045625#L2954-2 assume true; 1045617#L2958-2 assume !(1 == ~expectedDirection~0); 1045613#L2973-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1045612#L2071-2 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 1045611#L2571 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1045607#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 1045531#L903 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1044847#L525 assume 0 == initPersonOnFloor_~floor#1; 1044848#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1127095#L667 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1127094#L317 assume !(0 == callOnFloor_~floorID#1); 1127090#L320 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1127089#L338 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1127088#L669 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1127087#L2504 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1127086#L1184-1 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1127082#L1236-5 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1127080#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1127075#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 1026142#L2883-1 assume true; 1026140#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 1026139#L2894-1 assume true; 1026137#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 1026136#L2905-1 assume true; 1026134#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 1026133#L2916-1 assume true; 1026131#L2920-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 1026130#L2937-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1026124#L254-46 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1026122#L272-46 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1026118#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1026120#L1201-11 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1026123#L1222-11 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1026121#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1026114#L1809-1 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1026115#L1948-1 assume !(0 != timeShift_~tmp___9~2#1); 1044442#L2039-1 assume !(1 == ~doorState~0); 1044441#L2045-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1044437#L1388-3 assume !(1 == stopRequestedInDirection_~dir#1); 1044433#L1557-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1044434#L1559-3 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1045878#L2047-1 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1026199#L1764-3 assume !(1 == ~currentHeading~0); 1026200#L1774-3 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1025954#L1780-3 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1046169#L1785-3 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1046166#L2069-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1080338#L2945-1 assume !(-1 == ~expectedDirection~0); 1080336#L2954-1 assume true; 1080334#L2958-1 assume !(1 == ~expectedDirection~0); 1080332#L2973-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1080322#L2071-1 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1080321#L2586 [2024-11-17 08:39:48,724 INFO L747 eck$LassoCheckResult]: Loop: 1080321#L2586 assume true; 1080320#L2586-1 assume !false; 1080319#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1080318#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1080317#L1035 assume true;cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 1080316#L2594 assume 1 != cleanup_~tmp___0~8#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1080315#L254-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1080314#L272-25 assume true;anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 1080285#L1292 assume !(0 != anyStopRequested_~tmp___3~0#1); 1080286#L1296 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1046126#L254-24 assume !(0 == isFloorCalling_~floorID#1); 1046127#L258-24 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1046105#L272-24 assume true;anyStopRequested_#t~ret12#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~0#1 := anyStopRequested_#t~ret12#1;havoc anyStopRequested_#t~ret12#1; 1046106#L1303 assume 0 != anyStopRequested_~tmp___2~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1093505#L1342 assume true;isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1093504#L1369 assume true;cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 1093503#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1093502#L1184 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1093501#L1236-2 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1093500#L2814 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 1093499#L2815 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 1093498#L2822 assume true; 1093437#L2826 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1045791#L1201-2 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1045789#L1205-2 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1045786#L1222-2 assume true;__utac_acc__Specification3_spec__1_#t~ret98#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~5#1 := __utac_acc__Specification3_spec__1_#t~ret98#1;havoc __utac_acc__Specification3_spec__1_#t~ret98#1; 1045767#L2830 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5#1;~expectedDirection~0 := 1; 1045250#L2937 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1045247#L254-20 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1045244#L272-20 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1045243#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1045230#L1201 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1045227#L1222 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1045225#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1045224#L1809 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1045222#L1948 assume !(0 != timeShift_~tmp___9~2#1); 1045221#L2039 assume 1 == ~doorState~0;~doorState~0 := 0; 1045219#L2045 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1045217#L1388-1 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1045214#L828-4 assume true;stopRequestedInDirection_#t~ret17#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret17#1;havoc stopRequestedInDirection_#t~ret17#1; 1044946#L1392-1 assume 0 != stopRequestedInDirection_~tmp~5#1;stopRequestedInDirection_~retValue_acc~14#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1044932#L1559-1 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1044931#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1026102#L1764 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1025963#L828 assume true;continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1; 1025733#L1768 assume !(0 != continueInDirection_~tmp~6#1); 1025732#L1780 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1046179#L1785 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1046178#L2069 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1080330#L2945 assume !(-1 == ~expectedDirection~0); 1080328#L2954 assume true; 1080326#L2958 assume !(1 == ~expectedDirection~0); 1080324#L2973 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1080323#L2071 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1080321#L2586 [2024-11-17 08:39:48,725 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:48,725 INFO L85 PathProgramCache]: Analyzing trace with hash 1468335695, now seen corresponding path program 1 times [2024-11-17 08:39:48,725 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:48,726 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1623257244] [2024-11-17 08:39:48,726 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:48,726 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:48,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:48,921 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:48,922 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:48,922 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1623257244] [2024-11-17 08:39:48,922 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1623257244] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:48,922 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:48,922 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:48,922 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [660874953] [2024-11-17 08:39:48,922 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:48,922 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:48,922 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:48,922 INFO L85 PathProgramCache]: Analyzing trace with hash -947111943, now seen corresponding path program 1 times [2024-11-17 08:39:48,923 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:48,923 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1702358580] [2024-11-17 08:39:48,923 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:48,923 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:48,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:48,969 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:48,969 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:48,969 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1702358580] [2024-11-17 08:39:48,969 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1702358580] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:48,969 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:48,970 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:48,970 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1756785166] [2024-11-17 08:39:48,970 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:48,970 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:48,972 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:48,973 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-17 08:39:48,973 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-17 08:39:48,973 INFO L87 Difference]: Start difference. First operand 135899 states and 250296 transitions. cyclomatic complexity: 114398 Second operand has 4 states, 4 states have (on average 13.5) internal successors, (54), 4 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:49,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:49,576 INFO L93 Difference]: Finished difference Result 136019 states and 250400 transitions. [2024-11-17 08:39:49,576 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 136019 states and 250400 transitions. [2024-11-17 08:39:50,565 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 33242 [2024-11-17 08:39:50,905 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 136019 states to 136019 states and 250400 transitions. [2024-11-17 08:39:50,905 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 136019 [2024-11-17 08:39:50,987 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 136019 [2024-11-17 08:39:50,987 INFO L73 IsDeterministic]: Start isDeterministic. Operand 136019 states and 250400 transitions. [2024-11-17 08:39:51,058 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:51,059 INFO L218 hiAutomatonCegarLoop]: Abstraction has 136019 states and 250400 transitions. [2024-11-17 08:39:51,125 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 136019 states and 250400 transitions. [2024-11-17 08:39:52,687 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 136019 to 135967. [2024-11-17 08:39:52,804 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 135967 states, 135967 states have (on average 1.841240889333441) internal successors, (250348), 135966 states have internal predecessors, (250348), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:53,576 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 135967 states to 135967 states and 250348 transitions. [2024-11-17 08:39:53,576 INFO L240 hiAutomatonCegarLoop]: Abstraction has 135967 states and 250348 transitions. [2024-11-17 08:39:53,577 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-17 08:39:53,577 INFO L425 stractBuchiCegarLoop]: Abstraction has 135967 states and 250348 transitions. [2024-11-17 08:39:53,577 INFO L332 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2024-11-17 08:39:53,577 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 135967 states and 250348 transitions. [2024-11-17 08:39:53,916 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 33230 [2024-11-17 08:39:53,916 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-17 08:39:53,916 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-17 08:39:53,918 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:53,918 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-17 08:39:53,919 INFO L745 eck$LassoCheckResult]: Stem: 1290261#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1290262#ULTIMATE.init_returnLabel#1 assume true;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret94#1, main_~retValue_acc~22#1, main_~tmp~19#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~19#1;assume { :begin_inline_select_helpers } true; 1286995#L2430 assume true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1285239#L2423 assume true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;havoc valid_product_~retValue_acc~20#1;valid_product_~retValue_acc~20#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~20#1; 1285240#L2438 assume true;main_#t~ret94#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~20#1;assume { :end_inline_valid_product } true;main_~tmp~19#1 := main_#t~ret94#1;havoc main_#t~ret94#1; 1286564#L2777 assume 0 != main_~tmp~19#1;assume { :begin_inline_setup } true; 1286565#L2754 assume true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1287873#L247 assume true;assume { :end_inline_initFloors } true; 1287874#L1004 assume true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1288480#L878-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 1287010#L903-1 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1289513#L525-1 assume 0 == initPersonOnFloor_~floor#1; 1291198#L526-1 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1284654#L667-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1289751#L317-1 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1284935#L338-1 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1284936#L669-1 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1289588#L2504-1 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1290889#L1184-4 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1289313#L1236-14 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1289314#L2814-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1289944#L2876-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1287149#L1201-50 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1284838#L1222-50 assume true;__utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 1289694#L2880-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 1287800#L2937-4 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1289867#L254-109 assume !(0 == isFloorCalling_~floorID#1); 1289868#L258-109 assume !(1 == isFloorCalling_~floorID#1); 1291345#L262-109 assume !(2 == isFloorCalling_~floorID#1); 1291346#L266-109 assume 3 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_3~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1285623#L272-109 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1285624#L1797-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1291379#L1201-44 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1291380#L1205-44 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1290471#L1222-44 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1290472#L1804-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1291398#L1809-4 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1291399#L1948-4 assume !(0 != timeShift_~tmp___9~2#1); 1291335#L2039-4 assume !(1 == ~doorState~0); 1291336#L2045-4 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1290716#L1388-9 assume !(1 == stopRequestedInDirection_~dir#1); 1290717#L1557-9 assume !(0 == ~currentFloorID~0); 1287061#L1563-9 assume !(~currentFloorID~0 > 0); 1285230#L1575-9 assume true; 1289044#L1579-9 assume ~currentFloorID~0 > 0; 1295222#L1580-9 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 1295221#L1581-9 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1291504#L1559-9 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1291438#L2047-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1291439#L1764-12 assume !(1 == ~currentHeading~0); 1291071#L1774-12 assume !(0 == ~currentFloorID~0); 1291072#L1780-12 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1289900#L1785-12 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1289901#L2069-4 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1316831#L2945-4 assume !(-1 == ~expectedDirection~0); 1316829#L2954-4 assume true; 1316827#L2958-4 assume !(1 == ~expectedDirection~0); 1316825#L2973-4 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1316824#L2071-4 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1316823#L1184-3 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1316791#L1236-11 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1316789#L2814-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1316787#L2876-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1316788#L1201-39 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1322533#L1222-39 assume true;__utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 1322531#L2880-3 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 1322532#L2937-3 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1325024#L254-88 assume !(0 == isFloorCalling_~floorID#1); 1325023#L258-88 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1325019#L272-88 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1325013#L1797-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1325014#L1201-33 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1325016#L1205-33 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1325012#L1222-33 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1325010#L1804-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1325009#L1809-3 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1325008#L1948-3 assume !(0 != timeShift_~tmp___9~2#1); 1291484#L2039-3 assume !(1 == ~doorState~0); 1291483#L2045-3 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1291482#L1388-7 assume !(1 == stopRequestedInDirection_~dir#1); 1291476#L1557-7 assume !(0 == ~currentFloorID~0); 1291473#L1563-7 assume ~currentFloorID~0 > 0; 1291471#L1564-7 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1291472#L254-83 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1291477#L272-83 assume true;stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1291478#L1568-7 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1291466#L1559-7 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1291643#L2047-3 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1291644#L1764-9 assume !(1 == ~currentHeading~0); 1324204#L1774-9 assume !(0 == ~currentFloorID~0); 1315342#L1780-9 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1324193#L1785-9 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1324192#L2069-3 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1324185#L2945-3 assume !(-1 == ~expectedDirection~0); 1324184#L2954-3 assume true; 1324179#L2958-3 assume !(1 == ~expectedDirection~0); 1324177#L2973-3 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1324176#L2071-3 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1324171#L1184-2 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1324018#L1236-8 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1323995#L2814-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1323996#L2876-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1323989#L1201-28 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1323988#L1222-28 assume true;__utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 1323986#L2880-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 1288458#L2937-2 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1286182#L254-67 assume !(0 == isFloorCalling_~floorID#1); 1286183#L258-67 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1320840#L272-67 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1338583#L1797-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1338581#L1201-22 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1338574#L1205-22 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1338571#L1222-22 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1338567#L1804-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1338565#L1809-2 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1338561#L1948-2 assume !(0 != timeShift_~tmp___9~2#1); 1306176#L2039-2 assume !(1 == ~doorState~0); 1306173#L2045-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1306172#L1388-5 assume !(1 == stopRequestedInDirection_~dir#1); 1306171#L1557-5 assume !(0 == ~currentFloorID~0); 1306170#L1563-5 assume ~currentFloorID~0 > 0; 1306168#L1564-5 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1306169#L254-62 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1291567#L272-62 assume true;stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1291568#L1568-5 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1306109#L1559-5 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1306105#L2047-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1306106#L1764-6 assume !(1 == ~currentHeading~0); 1386061#L1774-6 assume !(0 == ~currentFloorID~0); 1302538#L1780-6 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1386054#L1785-6 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1386053#L2069-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1386046#L2945-2 assume !(-1 == ~expectedDirection~0); 1386045#L2954-2 assume true; 1386040#L2958-2 assume !(1 == ~expectedDirection~0); 1386038#L2973-2 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1386037#L2071-2 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 1386036#L2571 assume true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;havoc bobCall_~tmp~11#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1386034#L878 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 1386029#L903 assume true;bobCall_#t~ret82#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~11#1 := bobCall_#t~ret82#1;havoc bobCall_#t~ret82#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~11#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1386028#L525 assume 0 == initPersonOnFloor_~floor#1; 1385994#L526 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1385993#L667 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1385864#L317 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1385863#L338 assume true;havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1385862#L669 assume true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1385861#L2504 assume true;havoc bobCall_#t~ret82#1, bobCall_~tmp~11#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret88#1, cleanup_#t~ret89#1, cleanup_~i~3#1, cleanup_~tmp~17#1, cleanup_~tmp___0~8#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~17#1;havoc cleanup_~tmp___0~8#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1385860#L1184-1 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1370311#L1236-5 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1349694#L2814-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1342219#L2876-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1342220#L1201-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1402276#L1222-17 assume true;__utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 1402274#L2880-1 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 1402273#L2937-1 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1402272#L254-46 assume !(0 == isFloorCalling_~floorID#1); 1402268#L258-46 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1402263#L272-46 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1402259#L1797-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1402260#L1201-11 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1402266#L1205-11 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1402262#L1222-11 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1402261#L1804-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1402258#L1809-1 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1402255#L1948-1 assume !(0 != timeShift_~tmp___9~2#1); 1337733#L2039-1 assume !(1 == ~doorState~0); 1337732#L2045-1 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1337725#L1388-3 assume !(1 == stopRequestedInDirection_~dir#1); 1288467#L1557-3 assume !(0 == ~currentFloorID~0); 1288468#L1563-3 assume ~currentFloorID~0 > 0; 1289806#L1564-3 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1290976#L254-41 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1291429#L272-41 assume true;stopRequestedInDirection_#t~ret23#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1291430#L1568-3 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1325916#L1559-3 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1325917#L2047-1 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1365851#L1764-3 assume !(1 == ~currentHeading~0); 1365843#L1774-3 assume !(0 == ~currentFloorID~0); 1365834#L1780-3 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1365827#L1785-3 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1365824#L2069-1 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1389878#L2945-1 assume !(-1 == ~expectedDirection~0); 1389876#L2954-1 assume true; 1389874#L2958-1 assume !(1 == ~expectedDirection~0); 1389872#L2973-1 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1389862#L2071-1 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1389861#L2586 [2024-11-17 08:39:53,920 INFO L747 eck$LassoCheckResult]: Loop: 1389861#L2586 assume true; 1389860#L2586-1 assume !false; 1389859#cleanup_while_5_continue#1 assume true;cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1389858#L2590 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;havoc isBlocked_~retValue_acc~6#1;isBlocked_~retValue_acc~6#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~6#1; 1389857#L1035 assume true;cleanup_#t~ret88#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~6#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8#1 := cleanup_#t~ret88#1;havoc cleanup_#t~ret88#1; 1389856#L2594 assume 1 != cleanup_~tmp___0~8#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~13#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~12#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1389855#L254-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1389854#L272-25 assume true;anyStopRequested_#t~ret11#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret11#1;havoc anyStopRequested_#t~ret11#1; 1389827#L1292 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~12#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~12#1; 1389826#L1342 assume true;isIdle_#t~ret16#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret11#1, anyStopRequested_#t~ret12#1, anyStopRequested_#t~ret13#1, anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_~retValue_acc~12#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret16#1;havoc isIdle_#t~ret16#1;isIdle_~retValue_acc~13#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~13#1; 1389825#L1369 assume true;cleanup_#t~ret89#1 := isIdle_#res#1;havoc isIdle_#t~ret16#1, isIdle_~retValue_acc~13#1, isIdle_~tmp~4#1;assume { :end_inline_isIdle } true;cleanup_~tmp~17#1 := cleanup_#t~ret89#1;havoc cleanup_#t~ret89#1; 1389824#L2606 assume !(0 != cleanup_~tmp~17#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~9#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~20#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1389823#L1184 assume true;__utac_acc__Specification3_spec__1_#t~ret95#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~20#1 := __utac_acc__Specification3_spec__1_#t~ret95#1;havoc __utac_acc__Specification3_spec__1_#t~ret95#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~20#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1389822#L1236-2 assume true;__utac_acc__Specification3_spec__1_#t~ret96#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret96#1;havoc __utac_acc__Specification3_spec__1_#t~ret96#1; 1389821#L2814 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1389798#L2876 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1389797#L1201-6 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1389791#L1222-6 assume true;__utac_acc__Specification3_spec__1_#t~ret102#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1; 1389788#L2880 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 1389789#L2937 assume true;havoc __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~20#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor_~tmp~7#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~0#1; 1401869#L254-20 assume !(0 == isFloorCalling_~floorID#1); 1401867#L258-20 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~0#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~0#1; 1401861#L272-20 assume true;stopRequestedAtCurrentFloor_#t~ret29#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~0#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1401840#L1797 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1401841#L1201 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1401852#L1205 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1401850#L1222 assume true;stopRequestedAtCurrentFloor_#t~ret30#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~7#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1401842#L1804 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7#1);stopRequestedAtCurrentFloor_~retValue_acc~16#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~16#1; 1401843#L1809 assume true;timeShift_#t~ret43#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_~retValue_acc~16#1, stopRequestedAtCurrentFloor_~tmp~7#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1365527#L1948 assume !(0 != timeShift_~tmp___9~2#1); 1291528#L2039 assume 1 == ~doorState~0;~doorState~0 := 0; 1291529#L2045 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~3#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1291524#L1388-1 assume !(1 == stopRequestedInDirection_~dir#1); 1291525#L1557-1 assume !(0 == ~currentFloorID~0); 1290446#L1563-1 assume !(~currentFloorID~0 > 0); 1290128#L1575-1 assume true; 1291367#L1579-1 assume ~currentFloorID~0 > 0; 1291368#L1580-1 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 1290878#L1581-1 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1290127#L1559-1 assume true;timeShift_#t~ret50#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~3#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret50#1;havoc timeShift_#t~ret50#1; 1291494#L2047 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1291487#L1764 assume !(1 == ~currentHeading~0); 1291488#L1774 assume !(0 == ~currentFloorID~0); 1369202#L1780 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1369198#L1785 assume true;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1369197#L2069 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~21#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1389870#L2945 assume !(-1 == ~expectedDirection~0); 1389868#L2954 assume true; 1389866#L2958 assume !(1 == ~expectedDirection~0); 1389864#L2973 assume true;havoc __utac_acc__Specification3_spec__2_#t~ret107#1, __utac_acc__Specification3_spec__2_#t~ret108#1, __utac_acc__Specification3_spec__2_~tmp~21#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1389863#L2071 assume true;havoc timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_~tmp~9#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1389861#L2586 [2024-11-17 08:39:53,920 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:53,920 INFO L85 PathProgramCache]: Analyzing trace with hash 1601128741, now seen corresponding path program 1 times [2024-11-17 08:39:53,920 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:53,920 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1819138127] [2024-11-17 08:39:53,921 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:53,921 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:53,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:54,014 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:54,014 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:54,014 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1819138127] [2024-11-17 08:39:54,014 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1819138127] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:54,014 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:54,014 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-17 08:39:54,015 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [251761507] [2024-11-17 08:39:54,015 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:54,016 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-17 08:39:54,016 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-17 08:39:54,016 INFO L85 PathProgramCache]: Analyzing trace with hash -237923329, now seen corresponding path program 1 times [2024-11-17 08:39:54,016 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-17 08:39:54,016 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1170842212] [2024-11-17 08:39:54,016 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-17 08:39:54,016 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-17 08:39:54,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-17 08:39:54,042 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-17 08:39:54,042 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-17 08:39:54,043 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1170842212] [2024-11-17 08:39:54,043 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1170842212] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-17 08:39:54,043 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-17 08:39:54,043 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-17 08:39:54,043 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [916702424] [2024-11-17 08:39:54,043 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-17 08:39:54,043 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-17 08:39:54,043 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-17 08:39:54,044 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-17 08:39:54,044 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-17 08:39:54,044 INFO L87 Difference]: Start difference. First operand 135967 states and 250348 transitions. cyclomatic complexity: 114382 Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-17 08:39:55,750 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-17 08:39:55,750 INFO L93 Difference]: Finished difference Result 208523 states and 382878 transitions. [2024-11-17 08:39:55,750 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 208523 states and 382878 transitions. [2024-11-17 08:39:56,947 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 51368 [2024-11-17 08:39:57,558 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 208523 states to 208523 states and 382878 transitions. [2024-11-17 08:39:57,559 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 208523 [2024-11-17 08:39:57,708 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 208523 [2024-11-17 08:39:57,708 INFO L73 IsDeterministic]: Start isDeterministic. Operand 208523 states and 382878 transitions. [2024-11-17 08:39:57,832 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-17 08:39:57,833 INFO L218 hiAutomatonCegarLoop]: Abstraction has 208523 states and 382878 transitions. [2024-11-17 08:39:57,954 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 208523 states and 382878 transitions.