./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product19.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 4fc63b2a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04fa457e-782c-4969-8e6d-5a566f31f5be/bin/uautomizer-verify-4GaUIPS5ZU/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04fa457e-782c-4969-8e6d-5a566f31f5be/bin/uautomizer-verify-4GaUIPS5ZU/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04fa457e-782c-4969-8e6d-5a566f31f5be/bin/uautomizer-verify-4GaUIPS5ZU/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04fa457e-782c-4969-8e6d-5a566f31f5be/bin/uautomizer-verify-4GaUIPS5ZU/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product19.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04fa457e-782c-4969-8e6d-5a566f31f5be/bin/uautomizer-verify-4GaUIPS5ZU/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04fa457e-782c-4969-8e6d-5a566f31f5be/bin/uautomizer-verify-4GaUIPS5ZU --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4eb5ae4a2b95fd78cf87e688565203c0839d6de752e442a1cce7638954224909 --- Real Ultimate output --- This is Ultimate 0.2.5-dev-4fc63b2 [2024-10-31 22:01:09,004 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-10-31 22:01:09,070 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04fa457e-782c-4969-8e6d-5a566f31f5be/bin/uautomizer-verify-4GaUIPS5ZU/config/svcomp-Termination-32bit-Automizer_Default.epf [2024-10-31 22:01:09,075 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-10-31 22:01:09,075 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-10-31 22:01:09,101 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-10-31 22:01:09,101 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-10-31 22:01:09,102 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-10-31 22:01:09,107 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-10-31 22:01:09,108 INFO L153 SettingsManager]: * Use memory slicer=true [2024-10-31 22:01:09,108 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-10-31 22:01:09,109 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-10-31 22:01:09,109 INFO L153 SettingsManager]: * Use SBE=true [2024-10-31 22:01:09,110 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2024-10-31 22:01:09,110 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2024-10-31 22:01:09,114 INFO L153 SettingsManager]: * Use old map elimination=false [2024-10-31 22:01:09,115 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2024-10-31 22:01:09,115 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2024-10-31 22:01:09,115 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2024-10-31 22:01:09,116 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-10-31 22:01:09,116 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2024-10-31 22:01:09,119 INFO L153 SettingsManager]: * sizeof long=4 [2024-10-31 22:01:09,120 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-10-31 22:01:09,121 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-10-31 22:01:09,121 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-10-31 22:01:09,121 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2024-10-31 22:01:09,122 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2024-10-31 22:01:09,122 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2024-10-31 22:01:09,123 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-10-31 22:01:09,123 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2024-10-31 22:01:09,123 INFO L153 SettingsManager]: * sizeof long double=12 [2024-10-31 22:01:09,124 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-10-31 22:01:09,124 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2024-10-31 22:01:09,124 INFO L153 SettingsManager]: * Use constant arrays=true [2024-10-31 22:01:09,125 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-10-31 22:01:09,125 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-10-31 22:01:09,126 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-10-31 22:01:09,126 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-10-31 22:01:09,126 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2024-10-31 22:01:09,127 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04fa457e-782c-4969-8e6d-5a566f31f5be/bin/uautomizer-verify-4GaUIPS5ZU/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04fa457e-782c-4969-8e6d-5a566f31f5be/bin/uautomizer-verify-4GaUIPS5ZU Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4eb5ae4a2b95fd78cf87e688565203c0839d6de752e442a1cce7638954224909 [2024-10-31 22:01:09,398 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-10-31 22:01:09,425 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-10-31 22:01:09,428 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-10-31 22:01:09,430 INFO L270 PluginConnector]: Initializing CDTParser... [2024-10-31 22:01:09,430 INFO L274 PluginConnector]: CDTParser initialized [2024-10-31 22:01:09,432 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04fa457e-782c-4969-8e6d-5a566f31f5be/bin/uautomizer-verify-4GaUIPS5ZU/../../sv-benchmarks/c/product-lines/elevator_spec3_product19.cil.c Unable to find full path for "g++" [2024-10-31 22:01:11,443 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-10-31 22:01:11,859 INFO L384 CDTParser]: Found 1 translation units. [2024-10-31 22:01:11,860 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04fa457e-782c-4969-8e6d-5a566f31f5be/sv-benchmarks/c/product-lines/elevator_spec3_product19.cil.c [2024-10-31 22:01:11,888 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04fa457e-782c-4969-8e6d-5a566f31f5be/bin/uautomizer-verify-4GaUIPS5ZU/data/67b33e987/466926b2a51842d5bee06cf5b5e18698/FLAGc07628edd [2024-10-31 22:01:12,049 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04fa457e-782c-4969-8e6d-5a566f31f5be/bin/uautomizer-verify-4GaUIPS5ZU/data/67b33e987/466926b2a51842d5bee06cf5b5e18698 [2024-10-31 22:01:12,051 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-10-31 22:01:12,053 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-10-31 22:01:12,054 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-10-31 22:01:12,054 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-10-31 22:01:12,063 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-10-31 22:01:12,064 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 31.10 10:01:12" (1/1) ... [2024-10-31 22:01:12,065 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@315208e5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:12, skipping insertion in model container [2024-10-31 22:01:12,068 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 31.10 10:01:12" (1/1) ... [2024-10-31 22:01:12,163 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-10-31 22:01:12,962 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-10-31 22:01:12,999 INFO L200 MainTranslator]: Completed pre-run [2024-10-31 22:01:13,021 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [48] [2024-10-31 22:01:13,026 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [408] [2024-10-31 22:01:13,026 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [423] [2024-10-31 22:01:13,027 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [789] [2024-10-31 22:01:13,028 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [2329] [2024-10-31 22:01:13,028 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [2447] [2024-10-31 22:01:13,028 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [2482] [2024-10-31 22:01:13,029 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [2669] [2024-10-31 22:01:13,030 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [2678] [2024-10-31 22:01:13,030 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [2769] [2024-10-31 22:01:13,235 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-10-31 22:01:13,280 INFO L204 MainTranslator]: Completed translation [2024-10-31 22:01:13,281 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:13 WrapperNode [2024-10-31 22:01:13,282 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-10-31 22:01:13,284 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-10-31 22:01:13,284 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-10-31 22:01:13,284 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-10-31 22:01:13,293 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:13" (1/1) ... [2024-10-31 22:01:13,329 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:13" (1/1) ... [2024-10-31 22:01:13,819 INFO L138 Inliner]: procedures = 92, calls = 347, calls flagged for inlining = 200, calls inlined = 758, statements flattened = 23034 [2024-10-31 22:01:13,820 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-10-31 22:01:13,820 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-10-31 22:01:13,821 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-10-31 22:01:13,821 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-10-31 22:01:13,834 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:13" (1/1) ... [2024-10-31 22:01:13,834 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:13" (1/1) ... [2024-10-31 22:01:13,893 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:13" (1/1) ... [2024-10-31 22:01:14,013 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2024-10-31 22:01:14,014 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:13" (1/1) ... [2024-10-31 22:01:14,014 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:13" (1/1) ... [2024-10-31 22:01:14,310 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:13" (1/1) ... [2024-10-31 22:01:14,497 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:13" (1/1) ... [2024-10-31 22:01:14,525 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:13" (1/1) ... [2024-10-31 22:01:14,570 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:13" (1/1) ... [2024-10-31 22:01:14,648 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-10-31 22:01:14,650 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-10-31 22:01:14,650 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-10-31 22:01:14,650 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-10-31 22:01:14,651 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:13" (1/1) ... [2024-10-31 22:01:14,658 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-31 22:01:14,670 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04fa457e-782c-4969-8e6d-5a566f31f5be/bin/uautomizer-verify-4GaUIPS5ZU/z3 [2024-10-31 22:01:14,688 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04fa457e-782c-4969-8e6d-5a566f31f5be/bin/uautomizer-verify-4GaUIPS5ZU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-10-31 22:01:14,696 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_04fa457e-782c-4969-8e6d-5a566f31f5be/bin/uautomizer-verify-4GaUIPS5ZU/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2024-10-31 22:01:14,727 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-10-31 22:01:14,727 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-10-31 22:01:14,727 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-10-31 22:01:14,727 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-10-31 22:01:14,728 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-10-31 22:01:14,728 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-10-31 22:01:14,728 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-10-31 22:01:14,728 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2024-10-31 22:01:14,728 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2024-10-31 22:01:14,729 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2024-10-31 22:01:14,729 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2024-10-31 22:01:14,729 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2024-10-31 22:01:14,729 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2024-10-31 22:01:14,730 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2024-10-31 22:01:14,730 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2024-10-31 22:01:14,730 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2024-10-31 22:01:14,730 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2024-10-31 22:01:14,731 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2024-10-31 22:01:14,731 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2024-10-31 22:01:14,731 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2024-10-31 22:01:14,733 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2024-10-31 22:01:14,733 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-10-31 22:01:14,733 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-10-31 22:01:15,010 INFO L238 CfgBuilder]: Building ICFG [2024-10-31 22:01:15,012 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-10-31 22:01:29,449 INFO L? ?]: Removed 10870 outVars from TransFormulas that were not future-live. [2024-10-31 22:01:29,450 INFO L287 CfgBuilder]: Performing block encoding [2024-10-31 22:01:29,555 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-10-31 22:01:29,556 INFO L316 CfgBuilder]: Removed 1 assume(true) statements. [2024-10-31 22:01:29,556 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 31.10 10:01:29 BoogieIcfgContainer [2024-10-31 22:01:29,556 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-10-31 22:01:29,558 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2024-10-31 22:01:29,558 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2024-10-31 22:01:29,562 INFO L274 PluginConnector]: BuchiAutomizer initialized [2024-10-31 22:01:29,563 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-10-31 22:01:29,563 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 31.10 10:01:12" (1/3) ... [2024-10-31 22:01:29,564 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5b05f704 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 31.10 10:01:29, skipping insertion in model container [2024-10-31 22:01:29,565 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-10-31 22:01:29,565 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.10 10:01:13" (2/3) ... [2024-10-31 22:01:29,566 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5b05f704 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 31.10 10:01:29, skipping insertion in model container [2024-10-31 22:01:29,567 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-10-31 22:01:29,567 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 31.10 10:01:29" (3/3) ... [2024-10-31 22:01:29,568 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product19.cil.c [2024-10-31 22:01:29,784 INFO L300 stractBuchiCegarLoop]: Interprodecural is true [2024-10-31 22:01:29,784 INFO L301 stractBuchiCegarLoop]: Hoare is None [2024-10-31 22:01:29,784 INFO L302 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2024-10-31 22:01:29,784 INFO L303 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2024-10-31 22:01:29,785 INFO L304 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2024-10-31 22:01:29,785 INFO L305 stractBuchiCegarLoop]: Difference is false [2024-10-31 22:01:29,785 INFO L306 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2024-10-31 22:01:29,785 INFO L310 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2024-10-31 22:01:29,809 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6443 states, 6442 states have (on average 1.8635516920211115) internal successors, (12005), 6442 states have internal predecessors, (12005), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:01:29,967 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1304 [2024-10-31 22:01:29,967 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-31 22:01:29,968 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-31 22:01:29,995 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:01:29,995 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:01:29,996 INFO L332 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2024-10-31 22:01:30,014 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6443 states, 6442 states have (on average 1.8635516920211115) internal successors, (12005), 6442 states have internal predecessors, (12005), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:01:30,098 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1304 [2024-10-31 22:01:30,099 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-31 22:01:30,099 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-31 22:01:30,107 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:01:30,110 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:01:30,123 INFO L745 eck$LassoCheckResult]: Stem: 3346#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 3158#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 5462#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5175#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 470#valid_product_returnLabel#1true main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1191#L395true assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1074#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 29#initFloors_returnLabel#1true assume { :end_inline_initFloors } true; 647#initTopDown_returnLabel#1true assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1077#L2373true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1751#getOrigin_returnLabel#1true bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 4031#L3123true assume 0 == initPersonOnFloor_~floor#1; 5685#L3124true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 678#L3231-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1103#L2915true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 488#L2927-2true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 706#initPersonOnFloor_returnLabel#1true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1909#bobCall_returnLabel#1true havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 2316#getCurrentFloorID_returnLabel#1true __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 4884#getCurrentHeading_returnLabel#1true __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 2611#L2507true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 989#L2569true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 1097#L1046-5true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 216#buttonForFloorIsPressed_returnLabel#6true __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 1230#L2573true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 3399#L2613true havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5364#L2852true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4861#isFloorCalling_returnLabel#1true isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 5963#isExecutiveFloorCalling_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 4485#L1698true assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 2536#getCurrentFloorID_returnLabel#2true stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 5798#L1702true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 175#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 2976#L1853true assume !(0 != timeShift_~tmp___9~2#1); 4418#L1944true assume !(1 == ~doorState~0); 4314#L1944-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4637#L2852-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1881#isFloorCalling_returnLabel#4true isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 3848#isExecutiveFloorCalling_returnLabel#2true stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 6003#L1581true assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 3027#getCurrentFloorID_returnLabel#3true stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1159#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 3218#L1952true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 1758#L1638true assume !(1 == ~currentHeading~0); 3581#L1648true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6102#L1648-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1692#L1654-1true havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 4461#L1961-2true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 4325#L2638true assume !(-1 == ~expectedDirection~0); 5751#$Ultimate##2743true assume !(1 == ~expectedDirection~0); 5778#L2651true havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 6185#timeShift_returnLabel#1true havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 3916#getCurrentFloorID_returnLabel#5true __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 5996#getCurrentHeading_returnLabel#4true __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 3985#L2507-1true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 994#L2569-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 4251#L1046-17true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 313#buttonForFloorIsPressed_returnLabel#18true __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 2322#L2573-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 4852#L2613-1true havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2567#L2852-25true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2296#isFloorCalling_returnLabel#26true isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1028#isExecutiveFloorCalling_returnLabel#4true stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 546#L1698-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 3899#getCurrentFloorID_returnLabel#6true stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 2748#L1702-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1419#stopRequestedAtCurrentFloor_returnLabel#2true timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 2731#L1853-2true assume !(0 != timeShift_~tmp___9~2#1); 483#L1944-3true assume !(1 == ~doorState~0); 1876#L1944-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 754#L2852-28true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6309#isFloorCalling_returnLabel#29true isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 73#isExecutiveFloorCalling_returnLabel#5true stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 3442#L1581-2true assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 4000#getCurrentFloorID_returnLabel#7true stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 827#stopRequestedInDirection_returnLabel#3true timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 5824#L1952-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 2543#L1638-3true assume !(1 == ~currentHeading~0); 4184#L1648-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4401#L1648-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4202#L1654-7true havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 3524#L1961-5true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 955#L2638-1true assume !(-1 == ~expectedDirection~0); 4797#$Ultimate##5356true assume !(1 == ~expectedDirection~0); 6153#L2651-1true havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1390#timeShift_returnLabel#2true havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 4050#getCurrentFloorID_returnLabel#9true __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 1493#getCurrentHeading_returnLabel#7true __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 5976#L2507-2true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 3081#L2569-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 3836#L1046-29true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 6336#buttonForFloorIsPressed_returnLabel#30true __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 5269#L2573-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 4450#L2613-2true havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2935#L2852-50true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6162#isFloorCalling_returnLabel#51true isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 922#isExecutiveFloorCalling_returnLabel#7true stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 3710#L1698-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 6366#getCurrentFloorID_returnLabel#10true stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 3876#L1702-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 443#stopRequestedAtCurrentFloor_returnLabel#3true timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 1981#L1853-4true assume !(0 != timeShift_~tmp___9~2#1); 4272#L1944-6true assume !(1 == ~doorState~0); 3604#L1944-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3425#L2852-53true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6324#isFloorCalling_returnLabel#54true isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1195#isExecutiveFloorCalling_returnLabel#8true stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 3303#L1581-4true assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 2397#getCurrentFloorID_returnLabel#11true stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 4564#stopRequestedInDirection_returnLabel#5true timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1385#L1952-4true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 4414#L1638-6true assume !(1 == ~currentHeading~0); 4107#L1648-18true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5884#L1648-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2819#L1654-13true havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 2269#L1961-8true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 2438#L2638-2true assume !(-1 == ~expectedDirection~0); 3882#$Ultimate##7969true assume !(1 == ~expectedDirection~0); 6054#L2651-2true havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 3430#timeShift_returnLabel#3true havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 3265#threeTS_returnLabel#1true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 3822#L2373-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 261#getOrigin_returnLabel#2true bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5163#L3123-1true assume 0 == initPersonOnFloor_~floor#1; 3363#L3124-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 381#L3231-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 5421#L2915-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 4754#L2927-5true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 2264#initPersonOnFloor_returnLabel#2true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 899#bobCall_returnLabel#2true havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 2651#getCurrentFloorID_returnLabel#13true __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 1873#getCurrentHeading_returnLabel#10true __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 4864#L2507-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 4288#L2508-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 2117#L1046-36true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 5985#buttonForFloorIsPressed_returnLabel#37true __utac_acc__Specification3_spec__1_#t~ret123#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret123#1;havoc __utac_acc__Specification3_spec__1_#t~ret123#1; 5990#L2512-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 3888#L2613-3true havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4975#L2852-75true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3065#isFloorCalling_returnLabel#76true isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 484#isExecutiveFloorCalling_returnLabel#10true stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 2942#L1698-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 4700#getCurrentFloorID_returnLabel#14true stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 4005#L1702-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 2430#stopRequestedAtCurrentFloor_returnLabel#4true timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 4760#L1853-6true assume !(0 != timeShift_~tmp___9~2#1); 3011#L1944-9true assume !(1 == ~doorState~0); 5471#L1944-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1993#L2852-78true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3830#isFloorCalling_returnLabel#79true isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1556#isExecutiveFloorCalling_returnLabel#11true stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 4068#L1581-6true assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1107#getCurrentFloorID_returnLabel#15true stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 4477#stopRequestedInDirection_returnLabel#7true timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 2966#L1952-6true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 2701#L1638-9true assume !(1 == ~currentHeading~0); 3186#L1648-27true assume !(0 == ~currentFloorID~0); 4811#L1648-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1464#L1654-19true havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 5806#L1961-11true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 2142#L2638-3true assume !(-1 == ~expectedDirection~0); 5842#$Ultimate##10714true assume !(1 == ~expectedDirection~0); 3289#L2651-3true havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 6152#timeShift_returnLabel#4true havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1595#L198-2true [2024-10-31 22:01:30,129 INFO L747 eck$LassoCheckResult]: Loop: 1595#L198-2true assume !false; 2955#L199true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 3582#L202true assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 5457#isBlocked_returnLabel#1true cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 2019#L206true assume 1 != cleanup_~tmp___0~0#1; 4583#L206-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret48#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~15#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~15#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_#t~ret47#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~14#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~14#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2083#L2852-100true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4197#isFloorCalling_returnLabel#101true anyStopRequested_#t~ret43#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret43#1;havoc anyStopRequested_#t~ret43#1; 1049#L1137true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 3322#anyStopRequested_returnLabel#1true isIdle_#t~ret48#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_#t~ret47#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~14#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~15#1 := isIdle_#t~ret48#1;havoc isIdle_#t~ret48#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~15#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 788#isIdle_returnLabel#1true cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret48#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~15#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 544#L218true assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 4494#getCurrentFloorID_returnLabel#17true __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 3871#getCurrentHeading_returnLabel#13true __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 2253#L2507-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 3409#L2508-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 3933#L1046-48true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 2340#buttonForFloorIsPressed_returnLabel#49true __utac_acc__Specification3_spec__1_#t~ret123#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret123#1;havoc __utac_acc__Specification3_spec__1_#t~ret123#1; 2456#L2512-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 1958#L2613-4true havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3809#L2852-105true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4339#isFloorCalling_returnLabel#106true isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 2780#isExecutiveFloorCalling_returnLabel#13true stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1248#L1698-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 5323#getCurrentFloorID_returnLabel#18true stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 5184#L1702-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 830#stopRequestedAtCurrentFloor_returnLabel#5true timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 2810#L1853-8true assume !(0 != timeShift_~tmp___9~2#1); 5735#L1944-12true assume 1 == ~doorState~0;~doorState~0 := 0; 1123#L1944-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4166#L2852-108true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2760#isFloorCalling_returnLabel#109true isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 1507#isExecutiveFloorCalling_returnLabel#14true stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 1816#L1581-8true assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 3650#getCurrentFloorID_returnLabel#19true stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 2808#stopRequestedInDirection_returnLabel#9true timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 1463#L1952-8true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 4462#L1638-12true assume !(1 == ~currentHeading~0); 2906#L1648-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4239#L1648-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1566#L1654-25true havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 3915#L1961-14true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 3679#L2638-4true assume !(-1 == ~expectedDirection~0); 4167#$Ultimate##13410true assume !(1 == ~expectedDirection~0); 4429#L2651-4true havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 5151#timeShift_returnLabel#5true havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1595#L198-2true [2024-10-31 22:01:30,139 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:01:30,140 INFO L85 PathProgramCache]: Analyzing trace with hash -1694135409, now seen corresponding path program 1 times [2024-10-31 22:01:30,150 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:01:30,151 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1558643846] [2024-10-31 22:01:30,151 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:01:30,152 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:01:30,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:01:31,010 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:01:31,010 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:01:31,011 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1558643846] [2024-10-31 22:01:31,012 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1558643846] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:01:31,012 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:01:31,013 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-10-31 22:01:31,015 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2102847636] [2024-10-31 22:01:31,016 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:01:31,022 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-31 22:01:31,023 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:01:31,024 INFO L85 PathProgramCache]: Analyzing trace with hash -356953869, now seen corresponding path program 1 times [2024-10-31 22:01:31,024 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:01:31,024 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2123075055] [2024-10-31 22:01:31,025 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:01:31,025 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:01:31,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:01:31,188 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:01:31,189 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:01:31,189 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2123075055] [2024-10-31 22:01:31,189 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2123075055] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:01:31,190 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:01:31,190 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-31 22:01:31,190 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [140190482] [2024-10-31 22:01:31,190 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:01:31,192 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-31 22:01:31,193 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-31 22:01:31,233 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-10-31 22:01:31,234 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-10-31 22:01:31,252 INFO L87 Difference]: Start difference. First operand has 6443 states, 6442 states have (on average 1.8635516920211115) internal successors, (12005), 6442 states have internal predecessors, (12005), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:01:32,677 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-31 22:01:32,678 INFO L93 Difference]: Finished difference Result 12333 states and 22971 transitions. [2024-10-31 22:01:32,679 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 12333 states and 22971 transitions. [2024-10-31 22:01:32,773 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2506 [2024-10-31 22:01:32,858 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 12333 states to 12299 states and 22932 transitions. [2024-10-31 22:01:32,860 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 12299 [2024-10-31 22:01:32,881 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 12299 [2024-10-31 22:01:32,882 INFO L73 IsDeterministic]: Start isDeterministic. Operand 12299 states and 22932 transitions. [2024-10-31 22:01:32,917 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-31 22:01:32,918 INFO L218 hiAutomatonCegarLoop]: Abstraction has 12299 states and 22932 transitions. [2024-10-31 22:01:32,958 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12299 states and 22932 transitions. [2024-10-31 22:01:33,355 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12299 to 12289. [2024-10-31 22:01:33,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12289 states, 12289 states have (on average 1.8648384734315242) internal successors, (22917), 12288 states have internal predecessors, (22917), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:01:33,420 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12289 states to 12289 states and 22917 transitions. [2024-10-31 22:01:33,422 INFO L240 hiAutomatonCegarLoop]: Abstraction has 12289 states and 22917 transitions. [2024-10-31 22:01:33,423 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-10-31 22:01:33,427 INFO L425 stractBuchiCegarLoop]: Abstraction has 12289 states and 22917 transitions. [2024-10-31 22:01:33,427 INFO L332 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2024-10-31 22:01:33,427 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 12289 states and 22917 transitions. [2024-10-31 22:01:33,489 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2504 [2024-10-31 22:01:33,490 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-31 22:01:33,490 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-31 22:01:33,495 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:01:33,495 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:01:33,496 INFO L745 eck$LassoCheckResult]: Stem: 23972#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 23790#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 23791#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 25071#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 19907#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 19908#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 21065#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 18869#initFloors_returnLabel#1 assume { :end_inline_initFloors } true; 18870#initTopDown_returnLabel#1 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 20268#L2373 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 21057#getOrigin_returnLabel#1 bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 22124#L3123 assume 0 == initPersonOnFloor_~floor#1; 24459#L3124 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 19386#L3231-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 20337#L2915 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 19946#L2927-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 19947#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 20389#bobCall_returnLabel#1 havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 22334#getCurrentFloorID_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 22864#getCurrentHeading_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 23226#L2507 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 20905#L2569 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 20906#L1046-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 18992#buttonForFloorIsPressed_returnLabel#6 __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 19347#L2573 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 19334#L2613 havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 28738#L2852 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 28733#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 28732#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 28730#L1698 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 28731#getCurrentFloorID_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 28694#L1702 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 28692#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 28689#L1853 assume !(0 != timeShift_~tmp___9~2#1); 28688#L1944 assume !(1 == ~doorState~0); 28687#L1944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 28670#L2852-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 28665#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 28664#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 28662#L1581 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 28618#getCurrentFloorID_returnLabel#3 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 28617#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 28616#L1952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 28615#L1638 assume !(1 == ~currentHeading~0); 24150#L1648 assume !(0 == ~currentFloorID~0); 24151#L1648-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 22036#L1654-1 havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 22037#L1961-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 24757#L2638 assume !(-1 == ~expectedDirection~0); 29276#$Ultimate##2743 assume !(1 == ~expectedDirection~0); 29275#L2651 havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 29007#timeShift_returnLabel#1 havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 29006#getCurrentFloorID_returnLabel#5 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 29005#getCurrentHeading_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 29004#L2507-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 20914#L2569-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 20915#L1046-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 19579#buttonForFloorIsPressed_returnLabel#18 __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 19580#L2573-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 18929#L2613-1 havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 26063#L2852-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 26058#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 26057#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 26055#L1698-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 26056#getCurrentFloorID_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 26024#L1702-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 26023#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 26016#L1853-2 assume !(0 != timeShift_~tmp___9~2#1); 26017#L1944-3 assume !(1 == ~doorState~0); 29240#L1944-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 29238#L2852-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 29234#isFloorCalling_returnLabel#29 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 28565#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 28563#L1581-2 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 28523#getCurrentFloorID_returnLabel#7 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 28522#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 28520#L1952-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 25319#L1638-3 assume !(1 == ~currentHeading~0); 24568#L1648-9 assume !(0 == ~currentFloorID~0); 23480#L1648-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 25456#L1654-7 havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 25455#L1961-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 25453#L2638-1 assume !(-1 == ~expectedDirection~0); 25382#$Ultimate##5356 assume !(1 == ~expectedDirection~0); 25380#L2651-1 havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 25333#timeShift_returnLabel#2 havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 25330#getCurrentFloorID_returnLabel#9 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 25328#getCurrentHeading_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 25325#L2507-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 23716#L2569-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 23717#L1046-29 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 19636#buttonForFloorIsPressed_returnLabel#30 __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 25101#L2573-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 23065#L2613-2 havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 28014#L2852-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 28009#isFloorCalling_returnLabel#51 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 28008#isExecutiveFloorCalling_returnLabel#7 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 28002#L1698-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 28000#getCurrentFloorID_returnLabel#10 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 27978#L1702-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 27976#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 27972#L1853-4 assume !(0 != timeShift_~tmp___9~2#1); 27971#L1944-6 assume !(1 == ~doorState~0); 27970#L1944-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 27968#L2852-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 27964#isFloorCalling_returnLabel#54 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 27961#isExecutiveFloorCalling_returnLabel#8 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 27960#L1581-4 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 27899#getCurrentFloorID_returnLabel#11 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 27897#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 27895#L1952-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 27896#L1638-6 assume !(1 == ~currentHeading~0); 24509#L1648-18 assume !(0 == ~currentFloorID~0); 23519#L1648-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 29455#L1654-13 havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 29454#L1961-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 29452#L2638-2 assume !(-1 == ~expectedDirection~0); 29448#$Ultimate##7969 assume !(1 == ~expectedDirection~0); 29447#L2651-2 havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 29446#timeShift_returnLabel#3 havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 29445#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 29444#L2373-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 29438#getOrigin_returnLabel#2 bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 29437#L3123-1 assume 0 == initPersonOnFloor_~floor#1; 29420#L3124-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 29405#L3231-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 29402#L2915-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 29399#L2927-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 22808#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 22809#bobCall_returnLabel#2 havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 28518#getCurrentFloorID_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 28517#getCurrentHeading_returnLabel#10 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 25320#L2507-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 24918#L2569-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 21407#L1046-41 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 19155#buttonForFloorIsPressed_returnLabel#42 __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 19787#L2573-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 18864#L2613-3 havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 28321#L2852-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 28318#isFloorCalling_returnLabel#76 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 28317#isExecutiveFloorCalling_returnLabel#10 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 28315#L1698-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 28316#getCurrentFloorID_returnLabel#14 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 28219#L1702-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 28217#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 28215#L1853-6 assume !(0 != timeShift_~tmp___9~2#1); 28216#L1944-9 assume !(1 == ~doorState~0); 28359#L1944-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 28356#L2852-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 28353#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 28352#isExecutiveFloorCalling_returnLabel#11 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 27626#L1581-6 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 27587#getCurrentFloorID_returnLabel#15 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 27586#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 27584#L1952-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 27585#L1638-9 assume !(1 == ~currentHeading~0); 23828#L1648-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 20875#L1648-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 21713#L1654-19 havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 21714#L1961-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 22645#L2638-3 assume !(-1 == ~expectedDirection~0); 22126#$Ultimate##10714 assume !(1 == ~expectedDirection~0); 21924#L2651-3 havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 23923#timeShift_returnLabel#4 havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 21912#L198-2 [2024-10-31 22:01:33,497 INFO L747 eck$LassoCheckResult]: Loop: 21912#L198-2 assume !false; 21913#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 23594#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 24153#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 22490#L206 assume 1 != cleanup_~tmp___0~0#1; 22491#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret48#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~15#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~15#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_#t~ret47#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~14#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~14#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 22573#L2852-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 22574#isFloorCalling_returnLabel#101 anyStopRequested_#t~ret43#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret43#1;havoc anyStopRequested_#t~ret43#1; 21019#L1137 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 19327#anyStopRequested_returnLabel#1 isIdle_#t~ret48#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_#t~ret47#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~14#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~15#1 := isIdle_#t~ret48#1;havoc isIdle_#t~ret48#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~15#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 20551#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret48#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~15#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 20060#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 20061#getCurrentFloorID_returnLabel#17 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 24352#getCurrentHeading_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 22793#L2507-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 22794#L2508-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 24025#L1046-48 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 22889#buttonForFloorIsPressed_returnLabel#49 __utac_acc__Specification3_spec__1_#t~ret123#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret123#1;havoc __utac_acc__Specification3_spec__1_#t~ret123#1; 22890#L2512-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 22404#L2613-4 havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 22405#L2852-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 20296#isFloorCalling_returnLabel#106 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 23400#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 21363#L1698-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 21365#getCurrentFloorID_returnLabel#18 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 25075#L1702-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 20634#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 20635#L1853-8 assume !(0 != timeShift_~tmp___9~2#1); 23434#L1944-12 assume 1 == ~doorState~0;~doorState~0 := 0; 21145#L1944-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 21146#L2852-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 23207#isFloorCalling_returnLabel#109 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 21780#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 21781#L1581-8 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 22210#getCurrentFloorID_returnLabel#19 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 23192#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 21711#L1952-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 21712#L1638-12 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~29#1;isTopFloor_~retValue_acc~29#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~29#1; 24434#isTopFloor_returnLabel#22 continueInDirection_#t~ret63#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~18#1 := continueInDirection_#t~ret63#1;havoc continueInDirection_#t~ret63#1; 24435#L1642-36 assume !(0 != continueInDirection_~tmp~18#1); 23541#L1648-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 21872#L1654-25 havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 20688#L1961-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 24222#L2638-4 assume !(-1 == ~expectedDirection~0); 21669#$Ultimate##13410 assume !(1 == ~expectedDirection~0); 18837#L2651-4 havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 24733#timeShift_returnLabel#5 havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 21912#L198-2 [2024-10-31 22:01:33,752 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:01:33,753 INFO L85 PathProgramCache]: Analyzing trace with hash -1950154652, now seen corresponding path program 1 times [2024-10-31 22:01:33,757 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:01:33,758 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1151184241] [2024-10-31 22:01:33,758 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:01:33,758 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:01:33,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:01:34,191 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:01:34,195 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:01:34,195 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1151184241] [2024-10-31 22:01:34,196 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1151184241] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:01:34,196 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:01:34,196 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-10-31 22:01:34,196 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [770276332] [2024-10-31 22:01:34,197 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:01:34,197 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-31 22:01:34,199 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:01:34,200 INFO L85 PathProgramCache]: Analyzing trace with hash -898302288, now seen corresponding path program 1 times [2024-10-31 22:01:34,200 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:01:34,201 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [680736871] [2024-10-31 22:01:34,201 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:01:34,202 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:01:34,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:01:34,293 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:01:34,294 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:01:34,294 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [680736871] [2024-10-31 22:01:34,294 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [680736871] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:01:34,295 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:01:34,295 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-31 22:01:34,295 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [695327279] [2024-10-31 22:01:34,296 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:01:34,296 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-31 22:01:34,296 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-31 22:01:34,297 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-10-31 22:01:34,297 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-10-31 22:01:34,298 INFO L87 Difference]: Start difference. First operand 12289 states and 22917 transitions. cyclomatic complexity: 10629 Second operand has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:01:34,850 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-31 22:01:34,850 INFO L93 Difference]: Finished difference Result 18346 states and 34171 transitions. [2024-10-31 22:01:34,851 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18346 states and 34171 transitions. [2024-10-31 22:01:35,085 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3773 [2024-10-31 22:01:35,194 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18346 states to 18346 states and 34171 transitions. [2024-10-31 22:01:35,194 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18346 [2024-10-31 22:01:35,217 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18346 [2024-10-31 22:01:35,217 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18346 states and 34171 transitions. [2024-10-31 22:01:35,247 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-31 22:01:35,248 INFO L218 hiAutomatonCegarLoop]: Abstraction has 18346 states and 34171 transitions. [2024-10-31 22:01:35,268 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18346 states and 34171 transitions. [2024-10-31 22:01:35,542 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18346 to 18124. [2024-10-31 22:01:35,575 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18124 states, 18124 states have (on average 1.864213197969543) internal successors, (33787), 18123 states have internal predecessors, (33787), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-31 22:01:35,624 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18124 states to 18124 states and 33787 transitions. [2024-10-31 22:01:35,625 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18124 states and 33787 transitions. [2024-10-31 22:01:35,625 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-10-31 22:01:35,626 INFO L425 stractBuchiCegarLoop]: Abstraction has 18124 states and 33787 transitions. [2024-10-31 22:01:35,626 INFO L332 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2024-10-31 22:01:35,627 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18124 states and 33787 transitions. [2024-10-31 22:01:35,816 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3671 [2024-10-31 22:01:35,816 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-31 22:01:35,816 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-31 22:01:35,824 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:01:35,824 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-31 22:01:35,828 INFO L745 eck$LassoCheckResult]: Stem: 54643#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 54456#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 54457#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 55809#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 50554#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 50555#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 51708#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 49512#initFloors_returnLabel#1 assume { :end_inline_initFloors } true; 49513#initTopDown_returnLabel#1 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 50916#L2373 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 51699#getOrigin_returnLabel#1 bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 52775#L3123 assume 0 == initPersonOnFloor_~floor#1; 55151#L3124 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 50033#L3231-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 50983#L2915 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 50590#L2927-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 50591#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 51036#bobCall_returnLabel#1 havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 52988#getCurrentFloorID_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 53519#getCurrentHeading_returnLabel#1 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 53887#L2507 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 51550#L2569 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 51551#L1046-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 49640#buttonForFloorIsPressed_returnLabel#6 __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 49994#L2573 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 49981#L2613 havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 57082#L2852 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 56986#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 56923#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 56915#L1698 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 56907#getCurrentFloorID_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 56902#L1702 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 56901#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 56899#L1853 assume !(0 != timeShift_~tmp___9~2#1); 56894#L1944 assume !(1 == ~doorState~0); 56889#L1944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 56688#L2852-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 56684#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 56639#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 56582#L1581 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 56575#getCurrentFloorID_returnLabel#3 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 56572#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 56569#L1952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 56570#L1638 assume !(1 == ~currentHeading~0); 54834#L1648 assume !(0 == ~currentFloorID~0); 54835#L1648-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 57754#L1654-1 havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 57749#L1961-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 57733#L2638 assume !(-1 == ~expectedDirection~0); 51773#$Ultimate##2743 assume !(1 == ~expectedDirection~0); 55998#L2651 havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 55999#timeShift_returnLabel#1 havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 57589#getCurrentFloorID_returnLabel#5 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 57588#getCurrentHeading_returnLabel#4 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 57587#L2507-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 51559#L2569-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 51560#L1046-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 50224#buttonForFloorIsPressed_returnLabel#18 __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 50225#L2573-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 49572#L2613-1 havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 57441#L2852-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 57436#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 57419#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 57413#L1698-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 57406#getCurrentFloorID_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 57402#L1702-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 57399#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 57397#L1853-2 assume !(0 != timeShift_~tmp___9~2#1); 57396#L1944-3 assume !(1 == ~doorState~0); 57395#L1944-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 57393#L2852-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 57375#isFloorCalling_returnLabel#29 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 57317#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 57271#L1581-2 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 57269#getCurrentFloorID_returnLabel#7 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 57268#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 57266#L1952-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 56104#L1638-3 assume !(1 == ~currentHeading~0); 55271#L1648-9 assume !(0 == ~currentFloorID~0); 54142#L1648-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 55281#L1654-7 havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 49809#L1961-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 54790#L2638-1 assume !(-1 == ~expectedDirection~0); 55166#$Ultimate##5356 assume !(1 == ~expectedDirection~0); 55791#L2651-1 havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 56069#timeShift_returnLabel#2 havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 56115#getCurrentFloorID_returnLabel#9 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 56114#getCurrentHeading_returnLabel#7 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 56113#L2507-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 54383#L2569-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 54384#L1046-29 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 50281#buttonForFloorIsPressed_returnLabel#30 __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 55844#L2573-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 53722#L2613-2 havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 56815#L2852-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 56810#isFloorCalling_returnLabel#51 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 56809#isExecutiveFloorCalling_returnLabel#7 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 56807#L1698-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 56808#getCurrentFloorID_returnLabel#10 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 56776#L1702-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 56775#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 56773#L1853-4 assume !(0 != timeShift_~tmp___9~2#1); 56772#L1944-6 assume !(1 == ~doorState~0); 56771#L1944-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 56769#L2852-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 56765#isFloorCalling_returnLabel#54 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 56760#isExecutiveFloorCalling_returnLabel#8 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 56757#L1581-4 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 56637#getCurrentFloorID_returnLabel#11 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 56581#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 56573#L1952-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 56574#L1638-6 assume !(1 == ~currentHeading~0); 55204#L1648-18 assume !(0 == ~currentFloorID~0); 55205#L1648-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 58176#L1654-13 havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 58174#L1961-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 58172#L2638-2 assume !(-1 == ~expectedDirection~0); 58168#$Ultimate##7969 assume !(1 == ~expectedDirection~0); 58165#L2651-2 havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 58163#timeShift_returnLabel#3 havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 58161#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 58159#L2373-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 58152#getOrigin_returnLabel#2 bobCall_#t~ret5#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 58150#L3123-1 assume 0 == initPersonOnFloor_~floor#1; 57804#L3124-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 57787#L3231-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 57768#L2915-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 57730#L2927-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 57729#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 57224#bobCall_returnLabel#2 havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 57222#getCurrentFloorID_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 57219#getCurrentHeading_returnLabel#10 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 56105#L2507-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 55643#L2569-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 52050#L1046-41 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 49799#buttonForFloorIsPressed_returnLabel#42 __utac_acc__Specification3_spec__1_#t~ret128#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret128#1;havoc __utac_acc__Specification3_spec__1_#t~ret128#1; 50431#L2573-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 49507#L2613-3 havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 57262#L2852-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 57259#isFloorCalling_returnLabel#76 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 57250#isExecutiveFloorCalling_returnLabel#10 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 57238#L1698-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 57232#getCurrentFloorID_returnLabel#14 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 57226#L1702-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 57223#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 57220#L1853-6 assume !(0 != timeShift_~tmp___9~2#1); 57218#L1944-9 assume !(1 == ~doorState~0); 57217#L1944-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 57138#L2852-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 57133#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 57132#isExecutiveFloorCalling_returnLabel#11 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 57129#L1581-6 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 57083#getCurrentFloorID_returnLabel#15 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 57065#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 57060#L1952-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 57061#L1638-9 assume !(1 == ~currentHeading~0); 54496#L1648-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 54497#L1648-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 59157#L1654-19 havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 59155#L1961-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 59152#L2638-3 assume !(-1 == ~expectedDirection~0); 59149#$Ultimate##10714 assume !(1 == ~expectedDirection~0); 59147#L2651-3 havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 58167#timeShift_returnLabel#4 havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 58164#L198-2 [2024-10-31 22:01:35,829 INFO L747 eck$LassoCheckResult]: Loop: 58164#L198-2 assume !false; 58162#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 58160#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 58153#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 58151#L206 assume 1 != cleanup_~tmp___0~0#1; 58149#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret48#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~15#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~15#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_#t~ret47#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~14#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~14#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 57786#L2852-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 57781#isFloorCalling_returnLabel#101 anyStopRequested_#t~ret43#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret43#1;havoc anyStopRequested_#t~ret43#1; 57742#L1137 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 57732#anyStopRequested_returnLabel#1 isIdle_#t~ret48#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_#t~ret47#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~14#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~15#1 := isIdle_#t~ret48#1;havoc isIdle_#t~ret48#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~15#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 57731#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;havoc isIdle_#t~ret48#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~15#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 56299#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~22#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~24#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 55485#getCurrentFloorID_returnLabel#17 __utac_acc__Specification3_spec__1_#t~ret121#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~24#1 := __utac_acc__Specification3_spec__1_#t~ret121#1;havoc __utac_acc__Specification3_spec__1_#t~ret121#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~24#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 55043#getCurrentHeading_returnLabel#13 __utac_acc__Specification3_spec__1_#t~ret122#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret122#1;havoc __utac_acc__Specification3_spec__1_#t~ret122#1; 53450#L2507-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 53451#L2508-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 53696#$Ultimate##10821 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1); 50585#$Ultimate##10837 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 2); 50587#$Ultimate##10853 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 3); 55795#$Ultimate##10869 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 4); 53056#L2613-4 havoc __utac_acc__Specification3_spec__1_#t~ret121#1, __utac_acc__Specification3_spec__1_#t~ret122#1, __utac_acc__Specification3_spec__1_#t~ret123#1, __utac_acc__Specification3_spec__1_#t~ret124#1, __utac_acc__Specification3_spec__1_#t~ret125#1, __utac_acc__Specification3_spec__1_#t~ret126#1, __utac_acc__Specification3_spec__1_#t~ret127#1, __utac_acc__Specification3_spec__1_#t~ret128#1, __utac_acc__Specification3_spec__1_#t~ret129#1, __utac_acc__Specification3_spec__1_#t~ret130#1, __utac_acc__Specification3_spec__1_#t~ret131#1, __utac_acc__Specification3_spec__1_#t~ret132#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~24#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~6#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~20#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 53057#L2852-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 50940#isFloorCalling_returnLabel#106 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 54060#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret66#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~20#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 52007#L1698-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~20#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 52009#getCurrentFloorID_returnLabel#18 stopRequestedAtCurrentFloor_#t~ret67#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret67#1;havoc stopRequestedAtCurrentFloor_#t~ret67#1; 55814#L1702-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~17#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 51280#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret82#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_#t~ret69#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~20#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret82#1;havoc timeShift_#t~ret82#1; 51281#L1853-8 assume !(0 != timeShift_~tmp___9~2#1); 54094#L1944-12 assume 1 == ~doorState~0;~doorState~0 := 0; 51789#L1944-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~tmp~17#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;havoc isExecutiveFloorCalling_~retValue_acc~20#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 51790#L2852-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 53867#isFloorCalling_returnLabel#109 isExecutiveFloorCalling_#t~ret119#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~20#1 := isExecutiveFloorCalling_#t~ret119#1;havoc isExecutiveFloorCalling_#t~ret119#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~20#1; 52428#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret60#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret119#1, isExecutiveFloorCalling_~retValue_acc~20#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1; 52429#L1581-8 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 52854#getCurrentFloorID_returnLabel#19 stopRequestedInDirection_#t~ret61#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~17#1 := stopRequestedInDirection_#t~ret61#1;havoc stopRequestedInDirection_#t~ret61#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~17#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~14#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 53851#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret89#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~tmp~17#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 52357#L1952-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~18#1;~currentHeading~0 := continueInDirection_~dir#1; 52358#L1638-12 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~29#1;isTopFloor_~retValue_acc~29#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~29#1; 56112#isTopFloor_returnLabel#22 continueInDirection_#t~ret63#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~18#1 := continueInDirection_#t~ret63#1;havoc continueInDirection_#t~ret63#1; 61699#L1642-36 assume !(0 != continueInDirection_~tmp~18#1); 54206#L1648-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 60059#L1654-25 havoc continueInDirection_#t~ret63#1, continueInDirection_~dir#1, continueInDirection_~tmp~18#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 60054#L1961-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~25#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 60048#L2638-4 assume !(-1 == ~expectedDirection~0); 60046#$Ultimate##13410 assume !(1 == ~expectedDirection~0); 59145#L2651-4 havoc __utac_acc__Specification3_spec__2_#t~ret133#1, __utac_acc__Specification3_spec__2_#t~ret134#1, __utac_acc__Specification3_spec__2_~tmp~25#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true; 58166#timeShift_returnLabel#5 havoc timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_~tmp~22#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 58164#L198-2 [2024-10-31 22:01:35,830 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:01:35,830 INFO L85 PathProgramCache]: Analyzing trace with hash -1950154652, now seen corresponding path program 2 times [2024-10-31 22:01:35,830 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:01:35,830 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1664127633] [2024-10-31 22:01:35,831 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:01:35,831 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:01:35,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:01:36,145 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:01:36,146 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:01:36,146 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1664127633] [2024-10-31 22:01:36,146 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1664127633] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:01:36,147 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:01:36,147 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-10-31 22:01:36,148 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1868789813] [2024-10-31 22:01:36,148 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:01:36,148 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-31 22:01:36,149 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-31 22:01:36,149 INFO L85 PathProgramCache]: Analyzing trace with hash -1929724436, now seen corresponding path program 1 times [2024-10-31 22:01:36,150 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-31 22:01:36,150 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [916280459] [2024-10-31 22:01:36,150 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-31 22:01:36,151 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-31 22:01:36,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-31 22:01:36,572 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-31 22:01:36,572 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-31 22:01:36,572 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [916280459] [2024-10-31 22:01:36,573 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [916280459] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-31 22:01:36,573 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-31 22:01:36,573 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2024-10-31 22:01:36,573 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [869474166] [2024-10-31 22:01:36,573 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-31 22:01:36,574 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-31 22:01:36,574 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-31 22:01:36,575 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2024-10-31 22:01:36,575 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=129, Unknown=0, NotChecked=0, Total=156 [2024-10-31 22:01:36,576 INFO L87 Difference]: Start difference. First operand 18124 states and 33787 transitions. cyclomatic complexity: 15664 Second operand has 13 states, 13 states have (on average 3.6923076923076925) internal successors, (48), 13 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)