./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec14_product19.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec14_product19.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 5643166a994eeb2bd259cf18f0a4b43a93b8e6b433c116ad537f0a1a02a75ec3 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-13 13:22:42,864 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-13 13:22:42,865 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-13 13:22:42,878 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-13 13:22:42,878 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-13 13:22:42,879 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-13 13:22:42,880 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-13 13:22:42,881 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-13 13:22:42,882 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-13 13:22:42,883 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-13 13:22:42,883 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-13 13:22:42,884 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-13 13:22:42,884 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-13 13:22:42,885 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-13 13:22:42,885 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-13 13:22:42,886 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-13 13:22:42,887 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-13 13:22:42,887 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-13 13:22:42,888 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-13 13:22:42,889 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-13 13:22:42,890 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-13 13:22:42,891 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-13 13:22:42,892 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-13 13:22:42,892 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-13 13:22:42,894 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-13 13:22:42,895 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-13 13:22:42,895 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-13 13:22:42,895 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-13 13:22:42,896 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-13 13:22:42,896 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-13 13:22:42,897 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-13 13:22:42,897 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-13 13:22:42,898 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-13 13:22:42,898 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-13 13:22:42,899 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-13 13:22:42,899 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-13 13:22:42,899 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-13 13:22:42,900 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-13 13:22:42,900 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-13 13:22:42,900 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-13 13:22:42,901 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-13 13:22:42,902 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-12-13 13:22:42,917 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-13 13:22:42,917 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-13 13:22:42,917 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-13 13:22:42,917 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-13 13:22:42,918 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-13 13:22:42,918 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-13 13:22:42,918 INFO L138 SettingsManager]: * Use SBE=true [2022-12-13 13:22:42,918 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-12-13 13:22:42,918 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-12-13 13:22:42,919 INFO L138 SettingsManager]: * Use old map elimination=false [2022-12-13 13:22:42,919 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-12-13 13:22:42,919 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-12-13 13:22:42,919 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-12-13 13:22:42,919 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-13 13:22:42,919 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-13 13:22:42,919 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-12-13 13:22:42,919 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-13 13:22:42,919 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-13 13:22:42,919 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-13 13:22:42,919 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-12-13 13:22:42,920 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-12-13 13:22:42,920 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-12-13 13:22:42,920 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-13 13:22:42,920 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-13 13:22:42,920 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-12-13 13:22:42,920 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-13 13:22:42,920 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-12-13 13:22:42,920 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-13 13:22:42,920 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-12-13 13:22:42,920 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-13 13:22:42,921 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-12-13 13:22:42,921 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-12-13 13:22:42,921 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 5643166a994eeb2bd259cf18f0a4b43a93b8e6b433c116ad537f0a1a02a75ec3 [2022-12-13 13:22:43,084 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-13 13:22:43,101 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-13 13:22:43,103 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-13 13:22:43,104 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-13 13:22:43,104 INFO L275 PluginConnector]: CDTParser initialized [2022-12-13 13:22:43,105 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/../../sv-benchmarks/c/product-lines/elevator_spec14_product19.cil.c [2022-12-13 13:22:45,759 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-13 13:22:46,019 INFO L351 CDTParser]: Found 1 translation units. [2022-12-13 13:22:46,020 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/sv-benchmarks/c/product-lines/elevator_spec14_product19.cil.c [2022-12-13 13:22:46,038 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/data/253aa6312/37e3b37fbfee43d8baaae644b22aac9c/FLAG33f3039e6 [2022-12-13 13:22:46,050 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/data/253aa6312/37e3b37fbfee43d8baaae644b22aac9c [2022-12-13 13:22:46,052 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-13 13:22:46,053 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-13 13:22:46,054 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-13 13:22:46,055 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-13 13:22:46,058 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-13 13:22:46,058 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 01:22:46" (1/1) ... [2022-12-13 13:22:46,059 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1ac9bfe5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:22:46, skipping insertion in model container [2022-12-13 13:22:46,059 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 01:22:46" (1/1) ... [2022-12-13 13:22:46,066 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-13 13:22:46,106 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-13 13:22:46,375 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/sv-benchmarks/c/product-lines/elevator_spec14_product19.cil.c[49225,49238] [2022-12-13 13:22:46,410 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 13:22:46,421 INFO L203 MainTranslator]: Completed pre-run [2022-12-13 13:22:46,493 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/sv-benchmarks/c/product-lines/elevator_spec14_product19.cil.c[49225,49238] [2022-12-13 13:22:46,510 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 13:22:46,529 INFO L208 MainTranslator]: Completed translation [2022-12-13 13:22:46,529 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:22:46 WrapperNode [2022-12-13 13:22:46,529 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-13 13:22:46,530 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-13 13:22:46,530 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-13 13:22:46,530 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-13 13:22:46,536 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:22:46" (1/1) ... [2022-12-13 13:22:46,554 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:22:46" (1/1) ... [2022-12-13 13:22:46,780 INFO L138 Inliner]: procedures = 91, calls = 333, calls flagged for inlining = 186, calls inlined = 691, statements flattened = 21272 [2022-12-13 13:22:46,780 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-13 13:22:46,781 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-13 13:22:46,781 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-13 13:22:46,781 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-13 13:22:46,788 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:22:46" (1/1) ... [2022-12-13 13:22:46,789 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:22:46" (1/1) ... [2022-12-13 13:22:46,818 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:22:46" (1/1) ... [2022-12-13 13:22:46,818 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:22:46" (1/1) ... [2022-12-13 13:22:46,891 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:22:46" (1/1) ... [2022-12-13 13:22:46,953 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:22:46" (1/1) ... [2022-12-13 13:22:46,966 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:22:46" (1/1) ... [2022-12-13 13:22:46,983 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:22:46" (1/1) ... [2022-12-13 13:22:47,046 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-13 13:22:47,046 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-13 13:22:47,047 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-13 13:22:47,047 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-13 13:22:47,048 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:22:46" (1/1) ... [2022-12-13 13:22:47,052 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:22:47,061 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:22:47,072 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 13:22:47,074 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-12-13 13:22:47,120 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-13 13:22:47,120 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-13 13:22:47,120 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-13 13:22:47,120 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-13 13:22:47,239 INFO L235 CfgBuilder]: Building ICFG [2022-12-13 13:22:47,241 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-13 13:22:52,564 INFO L276 CfgBuilder]: Performing block encoding [2022-12-13 13:22:52,595 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-13 13:22:52,596 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-12-13 13:22:52,600 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 01:22:52 BoogieIcfgContainer [2022-12-13 13:22:52,601 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-13 13:22:52,601 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-12-13 13:22:52,601 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-12-13 13:22:52,604 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-12-13 13:22:52,604 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-12-13 13:22:52,605 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 13.12 01:22:46" (1/3) ... [2022-12-13 13:22:52,605 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@22996198 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 13.12 01:22:52, skipping insertion in model container [2022-12-13 13:22:52,605 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-12-13 13:22:52,605 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:22:46" (2/3) ... [2022-12-13 13:22:52,606 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@22996198 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 13.12 01:22:52, skipping insertion in model container [2022-12-13 13:22:52,606 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-12-13 13:22:52,606 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 01:22:52" (3/3) ... [2022-12-13 13:22:52,607 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec14_product19.cil.c [2022-12-13 13:22:52,705 INFO L303 stractBuchiCegarLoop]: Interprodecural is true [2022-12-13 13:22:52,705 INFO L304 stractBuchiCegarLoop]: Hoare is false [2022-12-13 13:22:52,706 INFO L305 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-12-13 13:22:52,706 INFO L306 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-12-13 13:22:52,706 INFO L307 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-12-13 13:22:52,706 INFO L308 stractBuchiCegarLoop]: Difference is false [2022-12-13 13:22:52,706 INFO L309 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-12-13 13:22:52,706 INFO L313 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-12-13 13:22:52,722 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6036 states, 6035 states have (on average 1.8662800331400167) internal successors, (11263), 6035 states have internal predecessors, (11263), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:22:52,812 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1223 [2022-12-13 13:22:52,812 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 13:22:52,812 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 13:22:52,824 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:22:52,824 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:22:52,824 INFO L335 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-12-13 13:22:52,834 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6036 states, 6035 states have (on average 1.8662800331400167) internal successors, (11263), 6035 states have internal predecessors, (11263), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:22:52,903 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1223 [2022-12-13 13:22:52,903 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 13:22:52,904 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 13:22:52,909 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:22:52,910 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:22:52,919 INFO L748 eck$LassoCheckResult]: Stem: 204#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 5905#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 4167#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 3707#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 845#valid_product_returnLabel#1true main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 3010#L2606true assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 1972#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 375#L2188true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 3233#getOrigin_returnLabel#1true bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3625#L2973true assume 0 == initPersonOnFloor_~floor#1; 2480#L2974true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1596#L3081-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2961#L2765true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 4320#L2777-2true assume { :end_inline_callOnFloor } true; 1229#initPersonOnFloor_returnLabel#1true assume { :end_inline_initPersonOnFloor } true; 512#bigMacCall_returnLabel#1true assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3558#L2702true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3106#isFloorCalling_returnLabel#1true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5127#isExecutiveFloorCalling_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 379#L962true assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4341#getCurrentFloorID_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 4#L966true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 298#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1394#L1115true assume !(0 != timeShift_~tmp___9~2#1); 1326#L1206true assume !(1 == ~doorState~0); 600#L1206-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5183#L2702-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3509#isFloorCalling_returnLabel#4true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1197#isExecutiveFloorCalling_returnLabel#2true stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 3528#L845true assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4711#getCurrentFloorID_returnLabel#2true stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 2105#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 5417#L1214true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2732#L902true assume !(1 == ~currentHeading~0); 2591#L912true assume !(0 == ~currentFloorID~0); 5198#L912-2true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1523#L918-1true assume { :end_inline_continueInDirection } true; 2625#L1223-2true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4572#L2702-25true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4311#isFloorCalling_returnLabel#26true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1833#isExecutiveFloorCalling_returnLabel#4true __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 4348#L1697true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 3427#L1697-1true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 5535#timeShift_returnLabel#1true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1524#L2702-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4418#isFloorCalling_returnLabel#27true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 140#isExecutiveFloorCalling_returnLabel#5true stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1290#L962-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1318#getCurrentFloorID_returnLabel#5true stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 3624#L966-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 2587#stopRequestedAtCurrentFloor_returnLabel#2true timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 2304#L1115-2true assume !(0 != timeShift_~tmp___9~2#1); 5768#L1206-3true assume !(1 == ~doorState~0); 2729#L1206-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5058#L2702-29true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 518#isFloorCalling_returnLabel#30true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 313#isExecutiveFloorCalling_returnLabel#6true stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 2240#L845-2true assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1280#getCurrentFloorID_returnLabel#6true stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1440#stopRequestedInDirection_returnLabel#3true timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 2236#L1214-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 4485#L902-3true assume !(1 == ~currentHeading~0); 3538#L912-9true assume !(0 == ~currentFloorID~0); 2462#L912-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1017#L918-7true assume { :end_inline_continueInDirection } true; 2600#L1223-5true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1855#L2702-51true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4667#isFloorCalling_returnLabel#52true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2181#isExecutiveFloorCalling_returnLabel#8true __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 920#L1697-2true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1952#L1697-3true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 2547#timeShift_returnLabel#2true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 975#L2702-52true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2892#isFloorCalling_returnLabel#53true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3580#isExecutiveFloorCalling_returnLabel#9true stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 4156#L962-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1565#getCurrentFloorID_returnLabel#9true stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 2827#L966-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 786#stopRequestedAtCurrentFloor_returnLabel#3true timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 934#L1115-4true assume !(0 != timeShift_~tmp___9~2#1); 1940#L1206-6true assume !(1 == ~doorState~0); 3529#L1206-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 69#L2702-55true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3151#isFloorCalling_returnLabel#56true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 863#isExecutiveFloorCalling_returnLabel#10true stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 2099#L845-4true assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 5889#getCurrentFloorID_returnLabel#10true stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 2523#stopRequestedInDirection_returnLabel#5true timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 5227#L1214-4true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 4611#L902-6true assume !(1 == ~currentHeading~0); 1756#L912-18true assume !(0 == ~currentFloorID~0); 4967#L912-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1007#L918-13true assume { :end_inline_continueInDirection } true; 1400#L1223-8true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5186#L2702-77true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5528#isFloorCalling_returnLabel#78true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3556#isExecutiveFloorCalling_returnLabel#12true __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 5884#L1697-4true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1814#L1697-5true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 353#timeShift_returnLabel#3true assume { :end_inline_timeShift } true; 64#threeTS_returnLabel#1true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 4401#L2188-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 476#getOrigin_returnLabel#2true bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5440#L2973-1true assume 0 == initPersonOnFloor_~floor#1; 1161#L2974-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2620#L3081-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 3959#L2765-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1627#L2777-5true assume { :end_inline_callOnFloor } true; 4272#initPersonOnFloor_returnLabel#2true assume { :end_inline_initPersonOnFloor } true; 3562#bobCall_returnLabel#1true assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5555#L2702-78true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1173#isFloorCalling_returnLabel#79true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5210#isExecutiveFloorCalling_returnLabel#13true stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1111#L962-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4964#getCurrentFloorID_returnLabel#13true stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1905#L966-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 4524#stopRequestedAtCurrentFloor_returnLabel#4true timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1908#L1115-6true assume !(0 != timeShift_~tmp___9~2#1); 2059#L1206-9true assume !(1 == ~doorState~0); 5280#L1206-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 270#L2702-81true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3822#isFloorCalling_returnLabel#82true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2737#isExecutiveFloorCalling_returnLabel#14true stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 5145#L845-6true assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2738#getCurrentFloorID_returnLabel#14true stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 2378#stopRequestedInDirection_returnLabel#7true timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1012#L1214-6true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2481#L902-9true assume !(1 == ~currentHeading~0); 503#L912-27true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4576#L912-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5139#L918-19true assume { :end_inline_continueInDirection } true; 656#L1223-11true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4767#L2702-103true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2833#isFloorCalling_returnLabel#104true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5752#isExecutiveFloorCalling_returnLabel#16true __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1305#L1697-6true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 694#L1697-7true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 5467#timeShift_returnLabel#4true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 788#L2415-2true [2022-12-13 13:22:52,921 INFO L750 eck$LassoCheckResult]: Loop: 788#L2415-2true assume !false; 1746#L2416true cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 3432#L2419true assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 4155#isBlocked_returnLabel#1true cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 250#L2423true assume 1 != cleanup_~tmp___0~11#1; 3685#L2423-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5206#L2702-104true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2638#isFloorCalling_returnLabel#105true anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 3351#L401true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 168#anyStopRequested_returnLabel#1true isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1387#isIdle_returnLabel#1true cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 2036#L2435true assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2997#L2702-109true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4257#isFloorCalling_returnLabel#110true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 561#isExecutiveFloorCalling_returnLabel#17true stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 5295#L962-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2399#getCurrentFloorID_returnLabel#17true stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1224#L966-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1450#stopRequestedAtCurrentFloor_returnLabel#5true timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 3394#L1115-8true assume !(0 != timeShift_~tmp___9~2#1); 4761#L1206-12true assume 1 == ~doorState~0;~doorState~0 := 0; 3041#L1206-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4351#L2702-112true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5368#isFloorCalling_returnLabel#113true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4859#isExecutiveFloorCalling_returnLabel#18true stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 905#L845-8true assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 3951#getCurrentFloorID_returnLabel#18true stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 5259#stopRequestedInDirection_returnLabel#9true timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 3587#L1214-8true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2650#L902-12true assume !(1 == ~currentHeading~0); 116#L912-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1520#L912-38true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5872#L918-25true assume { :end_inline_continueInDirection } true; 3468#L1223-14true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3771#L2702-134true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4639#isFloorCalling_returnLabel#135true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 930#isExecutiveFloorCalling_returnLabel#20true __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 3215#L1697-8true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 5119#L1697-9true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 3641#timeShift_returnLabel#5true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 788#L2415-2true [2022-12-13 13:22:52,927 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:22:52,928 INFO L85 PathProgramCache]: Analyzing trace with hash -426851756, now seen corresponding path program 1 times [2022-12-13 13:22:52,937 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:22:52,938 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [260106018] [2022-12-13 13:22:52,938 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:22:52,938 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:22:53,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:22:53,370 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:22:53,370 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:22:53,371 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [260106018] [2022-12-13 13:22:53,371 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [260106018] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:22:53,371 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:22:53,372 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 13:22:53,373 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [586565819] [2022-12-13 13:22:53,374 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:22:53,377 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 13:22:53,378 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:22:53,378 INFO L85 PathProgramCache]: Analyzing trace with hash 1763966285, now seen corresponding path program 1 times [2022-12-13 13:22:53,379 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:22:53,379 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [818125177] [2022-12-13 13:22:53,379 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:22:53,380 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:22:53,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:22:53,502 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:22:53,502 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:22:53,502 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [818125177] [2022-12-13 13:22:53,502 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [818125177] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:22:53,503 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:22:53,503 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 13:22:53,503 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1896971060] [2022-12-13 13:22:53,503 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:22:53,505 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 13:22:53,506 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:22:53,539 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 13:22:53,540 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-12-13 13:22:53,555 INFO L87 Difference]: Start difference. First operand has 6036 states, 6035 states have (on average 1.8662800331400167) internal successors, (11263), 6035 states have internal predecessors, (11263), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 7 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:22:59,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:22:59,791 INFO L93 Difference]: Finished difference Result 51613 states and 95897 transitions. [2022-12-13 13:22:59,792 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 51613 states and 95897 transitions. [2022-12-13 13:22:59,977 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 11239 [2022-12-13 13:23:00,173 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 51613 states to 51505 states and 95777 transitions. [2022-12-13 13:23:00,173 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 51505 [2022-12-13 13:23:00,211 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 51505 [2022-12-13 13:23:00,212 INFO L73 IsDeterministic]: Start isDeterministic. Operand 51505 states and 95777 transitions. [2022-12-13 13:23:00,265 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 13:23:00,265 INFO L218 hiAutomatonCegarLoop]: Abstraction has 51505 states and 95777 transitions. [2022-12-13 13:23:00,316 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51505 states and 95777 transitions. [2022-12-13 13:23:00,643 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51505 to 17456. [2022-12-13 13:23:00,668 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17456 states, 17456 states have (on average 1.8582149404216315) internal successors, (32437), 17455 states have internal predecessors, (32437), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:23:00,696 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17456 states to 17456 states and 32437 transitions. [2022-12-13 13:23:00,697 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17456 states and 32437 transitions. [2022-12-13 13:23:00,698 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-12-13 13:23:00,702 INFO L428 stractBuchiCegarLoop]: Abstraction has 17456 states and 32437 transitions. [2022-12-13 13:23:00,703 INFO L335 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-12-13 13:23:00,703 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17456 states and 32437 transitions. [2022-12-13 13:23:00,761 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3564 [2022-12-13 13:23:00,761 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 13:23:00,761 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 13:23:00,764 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:23:00,765 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:23:00,765 INFO L748 eck$LassoCheckResult]: Stem: 58215#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 58216#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 63406#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 63083#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 59539#valid_product_returnLabel#1 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 59540#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 61339#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 58603#L2188 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 58604#getOrigin_returnLabel#1 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 62711#L2973 assume 0 == initPersonOnFloor_~floor#1; 61951#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 57946#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 60801#L2765 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 59559#L2777-2 assume { :end_inline_callOnFloor } true; 60203#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 58891#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 58892#L2702 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 62597#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 62598#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 58613#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 58614#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 57699#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 57701#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 65011#L1115 assume !(0 != timeShift_~tmp___9~2#1); 65012#L1206 assume !(1 == ~doorState~0); 74713#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 74712#L2702-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 74711#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 74710#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 74708#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 74709#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 74717#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 74715#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 74714#L902 assume !(1 == ~currentHeading~0); 62088#L912 assume !(0 == ~currentFloorID~0); 61097#L912-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 60684#L918-1 assume { :end_inline_continueInDirection } true; 60685#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 62126#L2702-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 63501#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 61134#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 61135#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 58991#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 62867#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 60686#L2702-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 60687#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 65226#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 64334#L962-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 64327#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 64323#L966-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 63020#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 71105#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 71106#L1206-3 assume !(1 == ~doorState~0); 74784#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 74783#L2702-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 74782#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 74781#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 74779#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 60275#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 60276#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 60549#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 63585#L902-3 assume !(1 == ~currentHeading~0); 62946#L912-9 assume !(0 == ~currentFloorID~0); 61161#L912-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 59838#L918-7 assume { :end_inline_continueInDirection } true; 59839#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 61162#L2702-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 61163#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 69601#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 69598#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 69596#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 69594#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 69593#L2702-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 64049#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 69592#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 69589#L962-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 60751#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 60752#L966-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 62328#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 71655#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 71656#L1206-6 assume !(1 == ~doorState~0); 74757#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 74756#L2702-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 74755#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 74754#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 74752#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 74753#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 75106#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 75104#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 75105#L902-6 assume !(1 == ~currentHeading~0); 61027#L912-18 assume !(0 == ~currentFloorID~0); 61028#L912-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 59818#L918-13 assume { :end_inline_continueInDirection } true; 59345#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 60486#L2702-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 63870#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 62964#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 62965#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 61107#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 58555#timeShift_returnLabel#3 assume { :end_inline_timeShift } true; 57868#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 57869#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 58593#getOrigin_returnLabel#2 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 58819#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 60083#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 58074#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 62122#L2765-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 59588#L2777-5 assume { :end_inline_callOnFloor } true; 60847#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 62967#bobCall_returnLabel#1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 62968#L2702-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 60105#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 60106#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 64078#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 64070#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 64064#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 61232#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 74591#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 74592#L1206-9 assume !(1 == ~doorState~0); 74773#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 74772#L2702-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 74771#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 74770#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 74768#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 74769#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 75015#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 75013#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 75014#L902-9 assume !(1 == ~currentHeading~0); 58875#L912-27 assume !(0 == ~currentFloorID~0); 58876#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 63637#L918-19 assume { :end_inline_continueInDirection } true; 59176#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 59177#L2702-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 62334#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 62335#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 60325#L1697-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 58671#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 59253#timeShift_returnLabel#4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 59440#L2415-2 [2022-12-13 13:23:00,765 INFO L750 eck$LassoCheckResult]: Loop: 59440#L2415-2 assume !false; 59441#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 61016#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 62871#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 58322#L2423 assume 1 != cleanup_~tmp___0~11#1; 58323#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 63064#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 62140#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 62141#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 58135#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 58136#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 60469#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 65245#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 64043#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 65227#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 64328#L962-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 61860#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 61861#L966-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 60190#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 73687#L1115-8 assume !(0 != timeShift_~tmp___9~2#1); 73688#L1206-12 assume 1 == ~doorState~0;~doorState~0 := 0; 74765#L1206-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 74764#L2702-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 74763#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 74762#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 74760#L845-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 74761#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 74950#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 74949#L1214-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 62154#L902-12 assume !(1 == ~currentHeading~0); 58008#L912-36 assume !(0 == ~currentFloorID~0); 58009#L912-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 60680#L918-25 assume { :end_inline_continueInDirection } true; 58335#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 62896#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 63127#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 59691#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 59692#L1697-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 60906#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 63031#timeShift_returnLabel#5 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 59440#L2415-2 [2022-12-13 13:23:00,766 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:23:00,766 INFO L85 PathProgramCache]: Analyzing trace with hash -819878766, now seen corresponding path program 1 times [2022-12-13 13:23:00,766 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:23:00,767 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1121935134] [2022-12-13 13:23:00,767 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:23:00,767 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:23:00,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:23:00,907 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:23:00,907 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:23:00,907 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1121935134] [2022-12-13 13:23:00,908 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1121935134] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:23:00,908 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:23:00,908 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 13:23:00,908 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1369241289] [2022-12-13 13:23:00,908 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:23:00,909 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 13:23:00,909 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:23:00,909 INFO L85 PathProgramCache]: Analyzing trace with hash 1370939275, now seen corresponding path program 1 times [2022-12-13 13:23:00,909 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:23:00,910 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2008006846] [2022-12-13 13:23:00,910 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:23:00,910 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:23:00,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:23:00,996 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:23:00,996 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:23:00,996 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2008006846] [2022-12-13 13:23:00,997 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2008006846] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:23:00,997 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:23:00,997 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-13 13:23:00,997 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [544857090] [2022-12-13 13:23:00,997 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:23:00,998 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 13:23:00,998 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:23:00,998 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-12-13 13:23:00,999 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-12-13 13:23:00,999 INFO L87 Difference]: Start difference. First operand 17456 states and 32437 transitions. cyclomatic complexity: 14983 Second operand has 8 states, 8 states have (on average 5.0) internal successors, (40), 8 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:23:07,947 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:23:07,947 INFO L93 Difference]: Finished difference Result 160884 states and 300086 transitions. [2022-12-13 13:23:07,947 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 160884 states and 300086 transitions. [2022-12-13 13:23:08,492 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 43892 [2022-12-13 13:23:08,908 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 160884 states to 160884 states and 300086 transitions. [2022-12-13 13:23:08,908 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 160884 [2022-12-13 13:23:08,990 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 160884 [2022-12-13 13:23:08,991 INFO L73 IsDeterministic]: Start isDeterministic. Operand 160884 states and 300086 transitions. [2022-12-13 13:23:09,065 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 13:23:09,065 INFO L218 hiAutomatonCegarLoop]: Abstraction has 160884 states and 300086 transitions. [2022-12-13 13:23:09,130 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 160884 states and 300086 transitions. [2022-12-13 13:23:09,917 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 160884 to 34795. [2022-12-13 13:23:09,958 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34795 states, 34795 states have (on average 1.8577956602960195) internal successors, (64642), 34794 states have internal predecessors, (64642), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:23:10,031 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34795 states to 34795 states and 64642 transitions. [2022-12-13 13:23:10,032 INFO L240 hiAutomatonCegarLoop]: Abstraction has 34795 states and 64642 transitions. [2022-12-13 13:23:10,032 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-12-13 13:23:10,033 INFO L428 stractBuchiCegarLoop]: Abstraction has 34795 states and 64642 transitions. [2022-12-13 13:23:10,033 INFO L335 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-12-13 13:23:10,033 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 34795 states and 64642 transitions. [2022-12-13 13:23:10,140 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7066 [2022-12-13 13:23:10,140 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 13:23:10,140 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 13:23:10,144 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:23:10,144 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:23:10,145 INFO L748 eck$LassoCheckResult]: Stem: 236626#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 236627#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 242000#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 241646#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 237965#valid_product_returnLabel#1 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 237966#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 239798#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 237014#L2188 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 237015#getOrigin_returnLabel#1 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 241244#L2973 assume 0 == initPersonOnFloor_~floor#1; 240429#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 236356#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 239243#L2765 assume !(0 == callOnFloor_~floorID#1); 240965#L2768 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 237987#L2777-2 assume { :end_inline_callOnFloor } true; 242102#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 237313#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 237314#L2702 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 242780#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 242781#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 242775#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 242776#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 236109#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 236111#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 243635#L1115 assume !(0 != timeShift_~tmp___9~2#1); 243630#L1206 assume !(1 == ~doorState~0); 243631#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 242509#L2702-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 242510#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 238578#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 238579#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 242311#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 238408#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 239965#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 240726#L902 assume !(1 == ~currentHeading~0); 240571#L912 assume !(0 == ~currentFloorID~0); 239549#L912-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 239126#L918-1 assume { :end_inline_continueInDirection } true; 239127#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 243832#L2702-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 243830#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 243829#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 243827#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 243822#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 243823#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 249198#L2702-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 249197#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 249192#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 238730#L962-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 238731#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 243586#L966-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 241580#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 256677#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 256678#L1206-3 assume !(1 == ~doorState~0); 257288#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 257287#L2702-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 257286#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 257280#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 257277#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 257265#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 257264#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 257262#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 257263#L902-3 assume !(1 == ~currentHeading~0); 241496#L912-9 assume !(0 == ~currentFloorID~0); 239617#L912-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 238269#L918-7 assume { :end_inline_continueInDirection } true; 238270#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 240582#L2702-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 242282#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 242283#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 238101#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 238103#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 239767#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 256183#L2702-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 240896#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 240897#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 256182#L962-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 239193#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 239194#L966-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 237862#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 237863#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 238130#L1206-6 assume !(1 == ~doorState~0); 259406#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 249316#L2702-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 249317#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 249307#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 249308#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 242726#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 237450#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 240487#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 242527#L902-6 assume !(1 == ~currentHeading~0); 239475#L912-18 assume !(0 == ~currentFloorID~0); 239476#L912-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 242414#L918-13 assume { :end_inline_continueInDirection } true; 247224#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 247222#L2702-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 247220#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 247219#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 247217#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 247213#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 247212#timeShift_returnLabel#3 assume { :end_inline_timeShift } true; 247211#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 247208#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 247204#getOrigin_returnLabel#2 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 247202#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 238517#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 236484#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 247173#L2765-2 assume !(0 == callOnFloor_~floorID#1); 247174#L2768-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 262662#L2777-5 assume { :end_inline_callOnFloor } true; 262660#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 246931#bobCall_returnLabel#1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 246932#L2702-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 246921#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 246922#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 246910#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 246912#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 243588#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 239689#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 239691#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 239692#L1206-9 assume !(1 == ~doorState~0); 242549#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 242550#L2702-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 241727#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 241728#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 242497#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 242498#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 264702#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 264695#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 264531#L902-9 assume !(1 == ~currentHeading~0); 237293#L912-27 assume !(0 == ~currentFloorID~0); 237294#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 242244#L918-19 assume { :end_inline_continueInDirection } true; 238027#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 259066#L2702-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 242789#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 262244#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 262240#L1697-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 262237#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 262236#timeShift_returnLabel#4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 262234#L2415-2 [2022-12-13 13:23:10,146 INFO L750 eck$LassoCheckResult]: Loop: 262234#L2415-2 assume !false; 262233#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 262163#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 262162#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 262144#L2423 assume 1 != cleanup_~tmp___0~11#1; 262132#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 261793#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 261791#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 261792#L401 assume !(0 != anyStopRequested_~tmp___3~0#1); 240709#L405 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 236546#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 236547#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 238905#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 239877#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 243592#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 261988#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 263903#L962-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 240337#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 240338#L966-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 238625#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 268171#L1115-8 assume !(0 != timeShift_~tmp___9~2#1); 268170#L1206-12 assume 1 == ~doorState~0;~doorState~0 := 0; 268169#L1206-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 268168#L2702-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 268167#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 268166#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 268164#L845-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 268162#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 268161#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 268126#L1214-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 240645#L902-12 assume !(1 == ~currentHeading~0); 236418#L912-36 assume !(0 == ~currentFloorID~0); 236419#L912-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 239122#L918-25 assume { :end_inline_continueInDirection } true; 236746#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 262012#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 242822#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 262260#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 262257#L1697-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 262252#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 262235#timeShift_returnLabel#5 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 262234#L2415-2 [2022-12-13 13:23:10,146 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:23:10,146 INFO L85 PathProgramCache]: Analyzing trace with hash -963253205, now seen corresponding path program 1 times [2022-12-13 13:23:10,146 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:23:10,147 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [127593147] [2022-12-13 13:23:10,147 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:23:10,147 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:23:10,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:23:10,255 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:23:10,256 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:23:10,256 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [127593147] [2022-12-13 13:23:10,256 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [127593147] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:23:10,256 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:23:10,256 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 13:23:10,257 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [117583779] [2022-12-13 13:23:10,257 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:23:10,257 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 13:23:10,258 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:23:10,258 INFO L85 PathProgramCache]: Analyzing trace with hash 1167168847, now seen corresponding path program 1 times [2022-12-13 13:23:10,258 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:23:10,258 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1733278319] [2022-12-13 13:23:10,259 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:23:10,259 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:23:10,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:23:10,349 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:23:10,349 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:23:10,349 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1733278319] [2022-12-13 13:23:10,349 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1733278319] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:23:10,350 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:23:10,350 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-13 13:23:10,350 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [470574811] [2022-12-13 13:23:10,350 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:23:10,350 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 13:23:10,351 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:23:10,351 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-12-13 13:23:10,351 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-12-13 13:23:10,352 INFO L87 Difference]: Start difference. First operand 34795 states and 64642 transitions. cyclomatic complexity: 29849 Second operand has 8 states, 8 states have (on average 5.125) internal successors, (41), 8 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:23:20,390 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:23:20,390 INFO L93 Difference]: Finished difference Result 199925 states and 371307 transitions. [2022-12-13 13:23:20,391 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 199925 states and 371307 transitions. [2022-12-13 13:23:21,199 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 50561 [2022-12-13 13:23:21,828 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 199925 states to 199925 states and 371307 transitions. [2022-12-13 13:23:21,829 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 199925 [2022-12-13 13:23:21,963 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 199925 [2022-12-13 13:23:21,964 INFO L73 IsDeterministic]: Start isDeterministic. Operand 199925 states and 371307 transitions. [2022-12-13 13:23:22,054 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 13:23:22,054 INFO L218 hiAutomatonCegarLoop]: Abstraction has 199925 states and 371307 transitions. [2022-12-13 13:23:22,161 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 199925 states and 371307 transitions. [2022-12-13 13:23:22,825 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 199925 to 34514. [2022-12-13 13:23:22,857 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34514 states, 34514 states have (on average 1.8574201773193486) internal successors, (64107), 34513 states have internal predecessors, (64107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:23:22,909 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34514 states to 34514 states and 64107 transitions. [2022-12-13 13:23:22,909 INFO L240 hiAutomatonCegarLoop]: Abstraction has 34514 states and 64107 transitions. [2022-12-13 13:23:22,909 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2022-12-13 13:23:22,910 INFO L428 stractBuchiCegarLoop]: Abstraction has 34514 states and 64107 transitions. [2022-12-13 13:23:22,910 INFO L335 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-12-13 13:23:22,910 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 34514 states and 64107 transitions. [2022-12-13 13:23:22,984 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 7045 [2022-12-13 13:23:22,984 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 13:23:22,984 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 13:23:22,987 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:23:22,987 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:23:22,988 INFO L748 eck$LassoCheckResult]: Stem: 471442#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 471443#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 476719#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 476382#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 472774#valid_product_returnLabel#1 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 472775#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 474591#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 471833#L2188 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 471834#getOrigin_returnLabel#1 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 475997#L2973 assume 0 == initPersonOnFloor_~floor#1; 475220#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 471172#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 474047#L2765 assume !(0 == callOnFloor_~floorID#1); 475741#L2768 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 472794#L2777-2 assume { :end_inline_callOnFloor } true; 473440#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 472121#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 472122#L2702 assume !(0 == isFloorCalling_~floorID#1); 475964#L2706 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 472843#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 477475#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 477476#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 476832#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 476833#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 481891#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 481889#L1115 assume !(0 != timeShift_~tmp___9~2#1); 481887#L1206 assume !(1 == ~doorState~0); 481795#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 477495#L2702-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 476224#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 473381#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 473382#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 476234#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 496483#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 496480#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 496478#L902 assume !(1 == ~currentHeading~0); 496460#L912 assume !(0 == ~currentFloorID~0); 496457#L912-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 496453#L918-1 assume { :end_inline_continueInDirection } true; 475402#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 475403#L2702-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 476811#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 474384#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 474385#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 472222#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 476161#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 477338#L2702-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 477442#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 487110#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 487109#L962-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 487104#L2702-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 487102#isFloorCalling_returnLabel#29 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 487099#L935-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 487098#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 487097#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 487095#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 487094#L1206-3 assume !(1 == ~doorState~0); 487093#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 487092#L2702-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 477503#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 487091#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 487089#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 487087#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 487083#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 487073#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 487065#L902-3 assume !(1 == ~currentHeading~0); 487056#L912-9 assume !(0 == ~currentFloorID~0); 487052#L912-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 487048#L918-7 assume { :end_inline_continueInDirection } true; 484924#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 484923#L2702-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 476998#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 476999#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 484918#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 484916#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 484911#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 472999#L2702-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 473000#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 475676#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 476283#L962-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 486453#L2702-54 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 486447#isFloorCalling_returnLabel#55 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 486439#L935-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 486432#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 486424#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 486405#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 474541#L1206-6 assume !(1 == ~doorState~0); 474542#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 476235#L2702-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 479441#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 484892#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 484890#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 484888#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 484872#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 484793#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 484784#L902-6 assume !(1 == ~currentHeading~0); 484774#L912-18 assume !(0 == ~currentFloorID~0); 484400#L912-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 484396#L918-13 assume { :end_inline_continueInDirection } true; 481315#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 481314#L2702-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 477498#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 481313#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 481308#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 481305#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 481304#timeShift_returnLabel#3 assume { :end_inline_timeShift } true; 481303#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 481300#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 481296#getOrigin_returnLabel#2 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 481294#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 481244#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 481229#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 481227#L2765-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 481177#L2777-5 assume { :end_inline_callOnFloor } true; 479467#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 477465#bobCall_returnLabel#1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 477462#L2702-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 477459#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 477457#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 477454#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 477451#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 477449#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 474481#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 486605#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 486604#L1206-9 assume !(1 == ~doorState~0); 486603#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 486602#L2702-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 486601#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 486600#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 486598#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 486596#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 486592#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 486583#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 486576#L902-9 assume !(1 == ~currentHeading~0); 486570#L912-27 assume !(0 == ~currentFloorID~0); 486563#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 485122#L918-19 assume { :end_inline_continueInDirection } true; 484887#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 484885#L2702-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 484884#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 484883#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 484882#L1697-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 484881#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 484880#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 484877#L1702-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 484876#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 484875#timeShift_returnLabel#4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 484799#L2415-2 [2022-12-13 13:23:23,101 INFO L750 eck$LassoCheckResult]: Loop: 484799#L2415-2 assume !false; 484798#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 484797#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 484792#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 484782#L2423 assume 1 != cleanup_~tmp___0~11#1; 484772#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 484771#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 484767#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 484395#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 484394#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 484393#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 484392#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 479454#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 479453#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 479452#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 479450#L962-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 475126#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 475127#L966-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 473427#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 500074#L1115-8 assume !(0 != timeShift_~tmp___9~2#1); 500073#L1206-12 assume 1 == ~doorState~0;~doorState~0 := 0; 500072#L1206-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 500071#L2702-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 500070#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 500069#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 500067#L845-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 500065#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 500064#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 500061#L1214-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 500057#L902-12 assume !(1 == ~currentHeading~0); 500053#L912-36 assume !(0 == ~currentFloorID~0); 500017#L912-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 498555#L918-25 assume { :end_inline_continueInDirection } true; 489233#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 485107#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 485106#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 485105#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 485096#L1697-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 485089#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 485075#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 485069#L1702-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 484930#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 484874#timeShift_returnLabel#5 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 484799#L2415-2 [2022-12-13 13:23:23,101 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:23:23,102 INFO L85 PathProgramCache]: Analyzing trace with hash -860599393, now seen corresponding path program 1 times [2022-12-13 13:23:23,102 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:23:23,102 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2012237069] [2022-12-13 13:23:23,102 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:23:23,102 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:23:23,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:23:23,177 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:23:23,177 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:23:23,177 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2012237069] [2022-12-13 13:23:23,177 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2012237069] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:23:23,177 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:23:23,177 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 13:23:23,178 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [499090896] [2022-12-13 13:23:23,178 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:23:23,178 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 13:23:23,178 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:23:23,178 INFO L85 PathProgramCache]: Analyzing trace with hash 154677403, now seen corresponding path program 1 times [2022-12-13 13:23:23,179 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:23:23,179 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1365713664] [2022-12-13 13:23:23,179 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:23:23,179 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:23:23,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 13:23:23,188 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 13:23:23,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 13:23:23,213 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 13:23:24,495 INFO L210 LassoAnalysis]: Preferences: [2022-12-13 13:23:24,495 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-12-13 13:23:24,495 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-12-13 13:23:24,496 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-12-13 13:23:24,496 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2022-12-13 13:23:24,496 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:24,496 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-12-13 13:23:24,496 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-12-13 13:23:24,496 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product19.cil.c_Iteration4_Loop [2022-12-13 13:23:24,496 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-12-13 13:23:24,496 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-12-13 13:23:24,512 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,523 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,528 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,529 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,531 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,532 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,533 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,535 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,536 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,550 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,552 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,553 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,555 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,556 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,557 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,563 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,564 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,565 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,567 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,568 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,569 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,571 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,572 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,575 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,576 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,578 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,579 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,581 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,583 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,584 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,585 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,590 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,594 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,595 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,596 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,598 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,599 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,600 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,604 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,605 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,607 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,610 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,615 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,616 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,618 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,622 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,624 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,625 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,626 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,628 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,640 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,642 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,649 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,651 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,652 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,653 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,654 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,656 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,657 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,661 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,662 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,664 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:24,665 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:25,109 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-12-13 13:23:25,110 INFO L404 LassoAnalysis]: Checking for nontermination... [2022-12-13 13:23:25,111 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:25,111 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:23:25,112 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 13:23:25,113 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2022-12-13 13:23:25,114 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 13:23:25,114 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 13:23:25,137 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 13:23:25,137 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___0~10#1=1, ULTIMATE.start_isExecutiveFloor_#res#1=1, ULTIMATE.start_isExecutiveFloor_~retValue_acc~16#1=1} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___0~10#1=1, ULTIMATE.start_isExecutiveFloor_#res#1=1, ULTIMATE.start_isExecutiveFloor_~retValue_acc~16#1=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 13:23:25,140 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2022-12-13 13:23:25,141 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:25,141 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:23:25,142 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 13:23:25,143 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2022-12-13 13:23:25,144 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 13:23:25,144 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 13:23:25,162 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 13:23:25,162 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_~tmp~24#1=0, ULTIMATE.start_isIdle_~retValue_acc~7#1=0, ULTIMATE.start_isIdle_#res#1=0} Honda state: {ULTIMATE.start_cleanup_~tmp~24#1=0, ULTIMATE.start_isIdle_~retValue_acc~7#1=0, ULTIMATE.start_isIdle_#res#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 13:23:25,165 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Ended with exit code 0 [2022-12-13 13:23:25,165 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:25,165 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:23:25,166 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 13:23:25,167 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2022-12-13 13:23:25,168 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 13:23:25,168 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 13:23:25,179 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 13:23:25,179 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret24#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret24#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 13:23:25,182 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Ended with exit code 0 [2022-12-13 13:23:25,182 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:25,182 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:23:25,183 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 13:23:25,184 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2022-12-13 13:23:25,185 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 13:23:25,186 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 13:23:25,196 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 13:23:25,197 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret6#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret6#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 13:23:25,199 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Ended with exit code 0 [2022-12-13 13:23:25,200 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:25,200 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:23:25,201 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 13:23:25,202 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2022-12-13 13:23:25,203 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 13:23:25,203 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 13:23:25,214 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 13:23:25,215 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___0~0#1=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___0~0#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 13:23:25,217 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2022-12-13 13:23:25,218 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:25,218 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:23:25,219 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 13:23:25,219 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2022-12-13 13:23:25,221 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 13:23:25,221 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 13:23:25,232 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 13:23:25,232 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret31#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret31#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 13:23:25,235 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Ended with exit code 0 [2022-12-13 13:23:25,235 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:25,235 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:23:25,236 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 13:23:25,236 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2022-12-13 13:23:25,238 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 13:23:25,238 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 13:23:25,249 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 13:23:25,249 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret45#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret45#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 13:23:25,252 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Forceful destruction successful, exit code 0 [2022-12-13 13:23:25,252 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:25,252 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:23:25,253 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 13:23:25,254 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2022-12-13 13:23:25,255 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 13:23:25,255 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 13:23:25,266 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 13:23:25,266 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret53#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret53#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 13:23:25,269 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Ended with exit code 0 [2022-12-13 13:23:25,269 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:25,269 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:23:25,270 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 13:23:25,271 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2022-12-13 13:23:25,272 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 13:23:25,272 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 13:23:25,290 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Ended with exit code 0 [2022-12-13 13:23:25,290 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:25,290 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:23:25,291 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 13:23:25,292 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2022-12-13 13:23:25,294 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2022-12-13 13:23:25,294 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 13:23:28,510 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2022-12-13 13:23:28,517 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Ended with exit code 0 [2022-12-13 13:23:28,517 INFO L210 LassoAnalysis]: Preferences: [2022-12-13 13:23:28,517 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-12-13 13:23:28,518 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-12-13 13:23:28,518 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-12-13 13:23:28,518 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2022-12-13 13:23:28,518 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:28,518 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-12-13 13:23:28,518 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-12-13 13:23:28,518 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product19.cil.c_Iteration4_Loop [2022-12-13 13:23:28,518 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-12-13 13:23:28,518 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-12-13 13:23:28,522 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,524 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,528 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,531 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,534 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,535 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,536 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,537 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,538 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,539 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,548 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,549 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,550 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,551 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,552 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,553 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,557 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,558 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,559 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,559 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,560 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,561 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,562 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,563 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,565 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,567 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,568 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,569 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,570 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,571 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,572 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,573 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,574 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,577 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,578 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,579 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,580 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,581 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,582 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,583 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,586 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,589 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,590 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,591 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,592 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,595 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,596 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,597 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,598 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,599 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,604 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,605 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,606 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,607 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,609 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,610 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,611 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,615 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,616 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,620 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,621 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,622 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,632 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 13:23:28,951 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-12-13 13:23:28,954 INFO L490 LassoAnalysis]: Using template 'affine'. [2022-12-13 13:23:28,955 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:28,955 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:23:28,956 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 13:23:28,957 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2022-12-13 13:23:28,959 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 13:23:28,969 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 13:23:28,969 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 13:23:28,970 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 13:23:28,970 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 13:23:28,970 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 13:23:28,972 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 13:23:28,972 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 13:23:28,973 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 13:23:28,976 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Forceful destruction successful, exit code 0 [2022-12-13 13:23:28,976 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:28,976 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:23:28,977 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 13:23:28,978 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2022-12-13 13:23:28,979 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 13:23:28,989 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 13:23:28,989 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 13:23:28,990 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 13:23:28,990 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 13:23:28,990 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 13:23:28,991 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 13:23:28,991 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 13:23:28,992 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 13:23:28,995 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Ended with exit code 0 [2022-12-13 13:23:28,995 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:28,995 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:23:28,996 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 13:23:28,996 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2022-12-13 13:23:28,998 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 13:23:29,008 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 13:23:29,008 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 13:23:29,008 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 13:23:29,008 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 13:23:29,008 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 13:23:29,009 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 13:23:29,009 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 13:23:29,011 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 13:23:29,014 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Ended with exit code 0 [2022-12-13 13:23:29,014 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:29,014 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:23:29,015 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 13:23:29,016 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2022-12-13 13:23:29,017 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 13:23:29,027 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 13:23:29,027 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 13:23:29,028 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 13:23:29,028 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 13:23:29,028 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 13:23:29,029 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 13:23:29,029 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 13:23:29,032 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 13:23:29,034 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Forceful destruction successful, exit code 0 [2022-12-13 13:23:29,034 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:29,034 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:23:29,035 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 13:23:29,036 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Waiting until timeout for monitored process [2022-12-13 13:23:29,037 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 13:23:29,047 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 13:23:29,047 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 13:23:29,047 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 13:23:29,047 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 13:23:29,047 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 13:23:29,048 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 13:23:29,048 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 13:23:29,049 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 13:23:29,051 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Ended with exit code 0 [2022-12-13 13:23:29,051 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:29,052 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:23:29,052 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 13:23:29,053 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Waiting until timeout for monitored process [2022-12-13 13:23:29,054 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 13:23:29,064 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 13:23:29,064 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 13:23:29,064 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 13:23:29,064 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 13:23:29,064 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 13:23:29,065 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 13:23:29,065 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 13:23:29,066 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 13:23:29,068 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Forceful destruction successful, exit code 0 [2022-12-13 13:23:29,069 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:29,069 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:23:29,069 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 13:23:29,070 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Waiting until timeout for monitored process [2022-12-13 13:23:29,071 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 13:23:29,081 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 13:23:29,081 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 13:23:29,082 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 13:23:29,082 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 13:23:29,082 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 13:23:29,082 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 13:23:29,082 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 13:23:29,084 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 13:23:29,086 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Ended with exit code 0 [2022-12-13 13:23:29,086 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:29,086 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:23:29,087 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 13:23:29,088 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Waiting until timeout for monitored process [2022-12-13 13:23:29,089 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 13:23:29,099 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 13:23:29,099 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 13:23:29,099 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 13:23:29,099 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 13:23:29,099 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 13:23:29,099 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 13:23:29,099 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 13:23:29,101 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 13:23:29,103 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Forceful destruction successful, exit code 0 [2022-12-13 13:23:29,104 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:29,104 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:23:29,105 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 13:23:29,106 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Waiting until timeout for monitored process [2022-12-13 13:23:29,107 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 13:23:29,117 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 13:23:29,117 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 13:23:29,117 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 13:23:29,117 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 13:23:29,117 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 13:23:29,117 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 13:23:29,118 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 13:23:29,119 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 13:23:29,121 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Ended with exit code 0 [2022-12-13 13:23:29,122 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:29,122 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:23:29,122 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 13:23:29,123 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Waiting until timeout for monitored process [2022-12-13 13:23:29,125 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 13:23:29,135 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 13:23:29,135 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 13:23:29,135 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 13:23:29,135 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 13:23:29,136 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 13:23:29,138 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 13:23:29,138 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 13:23:29,142 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2022-12-13 13:23:29,147 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2022-12-13 13:23:29,147 INFO L444 ModelExtractionUtils]: 8 out of 11 variables were initially zero. Simplification set additionally 1 variables to zero. [2022-12-13 13:23:29,149 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 13:23:29,149 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:23:29,177 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 13:23:29,178 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Waiting until timeout for monitored process [2022-12-13 13:23:29,179 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2022-12-13 13:23:29,179 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2022-12-13 13:23:29,179 INFO L513 LassoAnalysis]: Proved termination. [2022-12-13 13:23:29,179 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = 1*~currentFloorID~0 Supporting invariants [] [2022-12-13 13:23:29,182 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Forceful destruction successful, exit code 0 [2022-12-13 13:23:29,184 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2022-12-13 13:23:29,196 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:23:29,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:23:29,328 INFO L263 TraceCheckSpWp]: Trace formula consists of 991 conjuncts, 2 conjunts are in the unsatisfiable core [2022-12-13 13:23:29,334 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 13:23:29,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:23:29,501 INFO L263 TraceCheckSpWp]: Trace formula consists of 171 conjuncts, 18 conjunts are in the unsatisfiable core [2022-12-13 13:23:29,503 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 13:23:29,749 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:23:29,754 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 8 loop predicates [2022-12-13 13:23:29,755 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 34514 states and 64107 transitions. cyclomatic complexity: 29598 Second operand has 10 states, 10 states have (on average 19.0) internal successors, (190), 10 states have internal predecessors, (190), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:23:30,388 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Ended with exit code 0 [2022-12-13 13:23:34,570 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 34514 states and 64107 transitions. cyclomatic complexity: 29598. Second operand has 10 states, 10 states have (on average 19.0) internal successors, (190), 10 states have internal predecessors, (190), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 151062 states and 279759 transitions. Complement of second has 27 states. [2022-12-13 13:23:34,573 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 14 states 1 stem states 12 non-accepting loop states 1 accepting loop states [2022-12-13 13:23:34,573 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 19.0) internal successors, (190), 10 states have internal predecessors, (190), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:23:34,590 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 30838 transitions. [2022-12-13 13:23:34,591 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 14 states and 30838 transitions. Stem has 147 letters. Loop has 43 letters. [2022-12-13 13:23:34,592 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-12-13 13:23:34,592 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 14 states and 30838 transitions. Stem has 190 letters. Loop has 43 letters. [2022-12-13 13:23:34,593 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-12-13 13:23:34,593 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 14 states and 30838 transitions. Stem has 147 letters. Loop has 86 letters. [2022-12-13 13:23:34,594 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-12-13 13:23:34,594 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 151062 states and 279759 transitions. [2022-12-13 13:23:35,075 INFO L131 ngComponentsAnalysis]: Automaton has 15 accepting balls. 56466 [2022-12-13 13:23:35,442 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 151062 states to 151062 states and 279759 transitions. [2022-12-13 13:23:35,442 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 92507 [2022-12-13 13:23:35,503 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 92861 [2022-12-13 13:23:35,503 INFO L73 IsDeterministic]: Start isDeterministic. Operand 151062 states and 279759 transitions. [2022-12-13 13:23:35,505 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 13:23:35,505 INFO L218 hiAutomatonCegarLoop]: Abstraction has 151062 states and 279759 transitions. [2022-12-13 13:23:35,578 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 151062 states and 279759 transitions. [2022-12-13 13:23:36,468 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 151062 to 67056. [2022-12-13 13:23:36,523 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67056 states, 67056 states have (on average 1.8568062514912909) internal successors, (124510), 67055 states have internal predecessors, (124510), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:23:36,737 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67056 states to 67056 states and 124510 transitions. [2022-12-13 13:23:36,737 INFO L240 hiAutomatonCegarLoop]: Abstraction has 67056 states and 124510 transitions. [2022-12-13 13:23:36,737 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:23:36,738 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 13:23:36,738 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 13:23:36,738 INFO L87 Difference]: Start difference. First operand 67056 states and 124510 transitions. Second operand has 3 states, 3 states have (on average 49.0) internal successors, (147), 3 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:23:37,275 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:23:37,275 INFO L93 Difference]: Finished difference Result 113766 states and 211191 transitions. [2022-12-13 13:23:37,275 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 113766 states and 211191 transitions. [2022-12-13 13:23:37,761 INFO L131 ngComponentsAnalysis]: Automaton has 24 accepting balls. 44014 [2022-12-13 13:23:38,011 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 113766 states to 113766 states and 211191 transitions. [2022-12-13 13:23:38,012 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 80006 [2022-12-13 13:23:38,056 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 80006 [2022-12-13 13:23:38,056 INFO L73 IsDeterministic]: Start isDeterministic. Operand 113766 states and 211191 transitions. [2022-12-13 13:23:38,064 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 13:23:38,064 INFO L218 hiAutomatonCegarLoop]: Abstraction has 113766 states and 211191 transitions. [2022-12-13 13:23:38,114 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 113766 states and 211191 transitions. [2022-12-13 13:23:38,751 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 113766 to 67056. [2022-12-13 13:23:38,799 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67056 states, 67056 states have (on average 1.8567167740396087) internal successors, (124504), 67055 states have internal predecessors, (124504), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:23:38,904 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67056 states to 67056 states and 124504 transitions. [2022-12-13 13:23:38,904 INFO L240 hiAutomatonCegarLoop]: Abstraction has 67056 states and 124504 transitions. [2022-12-13 13:23:38,904 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 13:23:38,905 INFO L428 stractBuchiCegarLoop]: Abstraction has 67056 states and 124504 transitions. [2022-12-13 13:23:38,905 INFO L335 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-12-13 13:23:38,905 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 67056 states and 124504 transitions. [2022-12-13 13:23:39,055 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 22007 [2022-12-13 13:23:39,055 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 13:23:39,055 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 13:23:39,059 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:23:39,059 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:23:39,059 INFO L748 eck$LassoCheckResult]: Stem: 838579#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 838580#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 845060#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 844635#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 840190#valid_product_returnLabel#1 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 840191#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 842415#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 839049#L2188 assume !(0 == getOrigin_~person#1); 839050#L2192 assume !(1 == getOrigin_~person#1); 841127#L2196 assume !(2 == getOrigin_~person#1); 841128#L2200 assume !(3 == getOrigin_~person#1); 843148#L2204 assume !(4 == getOrigin_~person#1); 844217#L2208 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 844127#getOrigin_returnLabel#1 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 844128#L2973 assume 0 == initPersonOnFloor_~floor#1; 843164#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 838265#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 841751#L2765 assume !(0 == callOnFloor_~floorID#1); 843803#L2768 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 840212#L2777-2 assume { :end_inline_callOnFloor } true; 840993#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 839405#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 839406#L2702 assume !(0 == isFloorCalling_~floorID#1); 844482#L2706 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 849117#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 849112#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 849109#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 849105#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 849103#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 849095#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 849093#L1115 assume !(0 != timeShift_~tmp___9~2#1); 847108#L1206 assume !(1 == ~doorState~0); 847101#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 847099#L2702-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 844435#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 840917#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 840918#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 844448#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 840718#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 842604#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 845783#L902 assume !(1 == ~currentHeading~0); 855044#L912 assume !(0 == ~currentFloorID~0); 842116#L912-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 841598#L918-1 assume { :end_inline_continueInDirection } true; 841599#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 843384#L2702-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 845183#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 842161#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 842162#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 839533#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 844352#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 841600#L2702-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 841601#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 838412#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 838413#L962-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 841115#L2702-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 839910#isFloorCalling_returnLabel#29 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 843430#L935-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 843431#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 843330#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 842899#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 842901#L1206-3 assume !(1 == ~doorState~0); 843521#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 843522#L2702-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 849635#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 855987#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 855985#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 855964#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 855963#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 855962#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 855225#L902-3 assume !(1 == ~currentHeading~0); 855226#L912-9 assume !(0 == ~currentFloorID~0); 843140#L912-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 840551#L918-7 assume { :end_inline_continueInDirection } true; 840552#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 842195#L2702-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 842196#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 857303#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 840355#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 840357#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 842374#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 840462#L2702-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 840463#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 857297#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 857295#L962-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 857296#L2702-54 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 861225#isFloorCalling_returnLabel#55 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 861217#L935-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 861216#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 861215#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 861214#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 861213#L1206-6 assume !(1 == ~doorState~0); 861212#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 861211#L2702-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 860117#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 861210#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 861209#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 861155#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 861154#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 855222#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 855224#L902-6 assume !(1 == ~currentHeading~0); 855219#L912-18 assume !(0 == ~currentFloorID~0); 842025#L912-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 840529#L918-13 assume { :end_inline_continueInDirection } true; 839948#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 845687#L2702-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 845688#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 864016#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 859876#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 842126#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 838990#timeShift_returnLabel#3 assume { :end_inline_timeShift } true; 838991#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 845253#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 839037#getOrigin_returnLabel#2 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 839312#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 840846#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 838415#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 843380#L2765-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 863849#L2777-5 assume { :end_inline_callOnFloor } true; 863847#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 863845#bobCall_returnLabel#1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 863843#L2702-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 863842#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 863841#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 863839#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 845564#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 845565#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 842282#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 859463#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 859458#L1206-9 assume !(1 == ~doorState~0); 859457#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 859456#L2702-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 859455#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 859449#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 859444#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 859445#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 870944#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 870943#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 870846#L902-9 assume !(1 == ~currentHeading~0); 870842#L912-27 assume !(0 == ~currentFloorID~0); 845357#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 845358#L918-19 assume { :end_inline_continueInDirection } true; 870835#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 870834#L2702-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 858200#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 870833#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 870832#L1697-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 870831#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 870830#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 870827#L1702-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 870826#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 870825#timeShift_returnLabel#4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 870823#L2415-2 assume !false; 870824#L2416 [2022-12-13 13:23:39,059 INFO L750 eck$LassoCheckResult]: Loop: 870824#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 898630#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 898629#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 898627#L2423 assume 1 != cleanup_~tmp___0~11#1; 898625#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 898623#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 898621#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 898619#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 898617#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 898615#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 898613#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 898611#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 885215#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 898608#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 898605#L962-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 898606#L2702-111 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 899226#isFloorCalling_returnLabel#112 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 899213#L935-9 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 899202#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#10 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 899201#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 899199#L1115-8 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 899200#L1117-8 assume !(0 != ~persons_0~0); 900501#L1117-9 assume !(0 != ~persons_1~0); 900477#L1131-4 assume !(0 != ~persons_2~0); 900460#L1145-4 assume !(0 != ~persons_3~0); 900457#L1159-4 assume !(0 != ~persons_4~0); 900452#L1173-4 assume !(0 != ~persons_5~0); 900448#L1187-4 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~5#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~9#1;havoc processWaitingOnFloor_~tmp___0~5#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 900447#L2793-48 assume 0 == isPersonOnFloor_~floor#1; 900430#L2794-24 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 900406#isPersonOnFloor_returnLabel#25 processWaitingOnFloor_#t~ret33#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~5#1 := processWaitingOnFloor_#t~ret33#1;havoc processWaitingOnFloor_#t~ret33#1; 900403#L1016-12 assume !(0 != processWaitingOnFloor_~tmp___0~5#1); 900401#L1016-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 900400#L2793-50 assume 0 == isPersonOnFloor_~floor#1; 900377#L2794-25 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 900350#isPersonOnFloor_returnLabel#26 processWaitingOnFloor_#t~ret35#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret35#1;havoc processWaitingOnFloor_#t~ret35#1; 900348#L1029-12 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 900346#L1029-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 900345#L2793-52 assume 0 == isPersonOnFloor_~floor#1; 900241#L2794-26 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 900239#isPersonOnFloor_returnLabel#27 processWaitingOnFloor_#t~ret37#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret37#1;havoc processWaitingOnFloor_#t~ret37#1; 900237#L1042-12 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 900235#L1042-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 900228#L2793-54 assume 0 == isPersonOnFloor_~floor#1; 900180#L2794-27 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 900171#isPersonOnFloor_returnLabel#28 processWaitingOnFloor_#t~ret39#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret39#1;havoc processWaitingOnFloor_#t~ret39#1; 900169#L1055-12 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 900167#L1055-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 900166#L2793-56 assume 0 == isPersonOnFloor_~floor#1; 900145#L2794-28 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 900132#isPersonOnFloor_returnLabel#29 processWaitingOnFloor_#t~ret41#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret41#1;havoc processWaitingOnFloor_#t~ret41#1; 900130#L1068-12 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 900131#L1068-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 901467#L2793-58 assume 0 == isPersonOnFloor_~floor#1; 901382#L2794-29 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 901361#isPersonOnFloor_returnLabel#30 processWaitingOnFloor_#t~ret43#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret43#1;havoc processWaitingOnFloor_#t~ret43#1; 901359#L1081-12 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 901353#L1081-14 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 897699#L2737-68 assume !(0 == resetCallOnFloor_~floorID#1); 897700#L2740-68 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 898677#L2749-104 assume { :end_inline_resetCallOnFloor } true; 898676#processWaitingOnFloor_returnLabel#5 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 898675#L264-8 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 898667#L276-14 assume { :end_inline_resetFloorButton } true; 898662#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 898660#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 885392#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 898653#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 898651#L1697-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 898649#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 898647#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 898644#L1702-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 898639#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 898635#timeShift_returnLabel#5 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 898633#L2415-2 assume !false; 870824#L2416 [2022-12-13 13:23:39,060 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:23:39,060 INFO L85 PathProgramCache]: Analyzing trace with hash -1775678488, now seen corresponding path program 1 times [2022-12-13 13:23:39,060 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:23:39,060 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1655904137] [2022-12-13 13:23:39,060 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:23:39,060 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:23:39,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:23:39,205 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:23:39,205 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:23:39,205 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1655904137] [2022-12-13 13:23:39,205 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1655904137] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:23:39,205 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:23:39,205 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 13:23:39,205 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1963860288] [2022-12-13 13:23:39,206 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:23:39,206 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 13:23:39,206 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:23:39,206 INFO L85 PathProgramCache]: Analyzing trace with hash 36074213, now seen corresponding path program 1 times [2022-12-13 13:23:39,206 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:23:39,206 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1911801242] [2022-12-13 13:23:39,206 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:23:39,207 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:23:39,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:23:39,274 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:23:39,274 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:23:39,274 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1911801242] [2022-12-13 13:23:39,275 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1911801242] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:23:39,275 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:23:39,275 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-13 13:23:39,275 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1496260057] [2022-12-13 13:23:39,275 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:23:39,275 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 13:23:39,275 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:23:39,276 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-12-13 13:23:39,276 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-12-13 13:23:39,276 INFO L87 Difference]: Start difference. First operand 67056 states and 124504 transitions. cyclomatic complexity: 57466 Second operand has 8 states, 8 states have (on average 9.375) internal successors, (75), 8 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:23:45,552 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:23:45,553 INFO L93 Difference]: Finished difference Result 276110 states and 512244 transitions. [2022-12-13 13:23:45,553 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 276110 states and 512244 transitions. [2022-12-13 13:23:46,466 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 83940 [2022-12-13 13:23:47,236 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 276110 states to 276110 states and 512244 transitions. [2022-12-13 13:23:47,236 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 191621 [2022-12-13 13:23:47,340 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 191621 [2022-12-13 13:23:47,340 INFO L73 IsDeterministic]: Start isDeterministic. Operand 276110 states and 512244 transitions. [2022-12-13 13:23:47,353 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 13:23:47,353 INFO L218 hiAutomatonCegarLoop]: Abstraction has 276110 states and 512244 transitions. [2022-12-13 13:23:47,473 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 276110 states and 512244 transitions. [2022-12-13 13:23:48,537 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 276110 to 66801. [2022-12-13 13:23:48,586 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66801 states, 66801 states have (on average 1.8566787922336492) internal successors, (124028), 66800 states have internal predecessors, (124028), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:23:48,691 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66801 states to 66801 states and 124028 transitions. [2022-12-13 13:23:48,691 INFO L240 hiAutomatonCegarLoop]: Abstraction has 66801 states and 124028 transitions. [2022-12-13 13:23:48,692 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-12-13 13:23:48,692 INFO L428 stractBuchiCegarLoop]: Abstraction has 66801 states and 124028 transitions. [2022-12-13 13:23:48,692 INFO L335 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-12-13 13:23:48,692 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 66801 states and 124028 transitions. [2022-12-13 13:23:48,841 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 21917 [2022-12-13 13:23:48,841 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 13:23:48,841 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 13:23:48,844 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:23:48,845 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:23:48,845 INFO L748 eck$LassoCheckResult]: Stem: 1181820#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1181821#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 1188292#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1187857#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 1183434#valid_product_returnLabel#1 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 1183435#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 1185640#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1182286#L2188 assume !(0 == getOrigin_~person#1); 1182287#L2192 assume !(1 == getOrigin_~person#1); 1184361#L2196 assume !(2 == getOrigin_~person#1); 1184362#L2200 assume !(3 == getOrigin_~person#1); 1186369#L2204 assume !(4 == getOrigin_~person#1); 1187438#L2208 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1187351#getOrigin_returnLabel#1 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1187352#L2973 assume 0 == initPersonOnFloor_~floor#1; 1186384#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1181505#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1184973#L2765 assume !(0 == callOnFloor_~floorID#1); 1187029#L2768 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1183456#L2777-2 assume { :end_inline_callOnFloor } true; 1184226#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1184227#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1187708#L2702 assume !(0 == isFloorCalling_~floorID#1); 1187709#L2706 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1189353#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1189354#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1189268#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1189269#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1181198#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1181200#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1182086#L1115 assume !(0 != timeShift_~tmp___9~2#1); 1184427#L1206 assume !(1 == ~doorState~0); 1184428#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1191211#L2702-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1187663#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1184152#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1184153#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1187673#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1204032#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1203513#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1203041#L902 assume !(1 == ~currentHeading~0); 1203042#L912 assume !(0 == ~currentFloorID~0); 1185339#L912-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1184828#L918-1 assume { :end_inline_continueInDirection } true; 1184829#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1186606#L2702-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1188411#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1185383#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1185384#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1182771#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1187574#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1189078#L2702-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1189228#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1181652#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1181653#L962-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1184348#L2702-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1200155#isFloorCalling_returnLabel#29 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 1200125#L935-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 1200123#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1200116#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1200114#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 1189152#L1206-3 assume !(1 == ~doorState~0); 1186739#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1186740#L2702-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1182653#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1182654#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1201005#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1201004#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1200991#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1200983#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1200974#L902-3 assume !(1 == ~currentHeading~0); 1200965#L912-9 assume !(0 == ~currentFloorID~0); 1199538#L912-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1199529#L918-7 assume { :end_inline_continueInDirection } true; 1192799#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1192797#L2702-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1190175#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1185952#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1185953#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1192791#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1192786#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1183704#L2702-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1183705#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1193513#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1193512#L962-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1188272#L2702-54 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1182730#isFloorCalling_returnLabel#55 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 1187414#L935-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 1182608#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1183308#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1183309#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 1183631#L1206-6 assume !(1 == ~doorState~0); 1185575#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1181423#L2702-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1181424#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1183469#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1183470#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1185823#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1203308#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1203303#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1203283#L902-6 assume !(1 == ~currentHeading~0); 1203078#L912-18 assume !(0 == ~currentFloorID~0); 1185248#L912-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1183768#L918-13 assume { :end_inline_continueInDirection } true; 1183193#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1184582#L2702-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1188911#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1187706#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1187707#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1201760#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1182228#timeShift_returnLabel#3 assume { :end_inline_timeShift } true; 1181410#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1181411#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1182274#getOrigin_returnLabel#2 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1182548#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 1189045#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1201720#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1201714#L2765-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1188102#L2777-5 assume { :end_inline_callOnFloor } true; 1201347#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 1190207#bobCall_returnLabel#1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1190205#L2702-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1190204#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1190203#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1190202#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1190201#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1190200#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1185505#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1207492#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 1207493#L1206-9 assume !(1 == ~doorState~0); 1207782#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1207781#L2702-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1207780#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1207779#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1207777#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1207775#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1207737#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1207719#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1207714#L902-9 assume !(1 == ~currentHeading~0); 1207686#L912-27 assume !(0 == ~currentFloorID~0); 1207685#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1206663#L918-19 assume { :end_inline_continueInDirection } true; 1205942#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1205940#L2702-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1186875#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1186876#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1184383#L1697-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1184384#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 1211563#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 1211560#L1702-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 1211559#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1211558#timeShift_returnLabel#4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1211556#L2415-2 assume !false; 1211557#L2416 [2022-12-13 13:23:48,845 INFO L750 eck$LassoCheckResult]: Loop: 1211557#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1221687#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1221671#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 1221672#L2423 assume 1 != cleanup_~tmp___0~11#1; 1221663#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1221664#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1221659#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 1221660#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1221655#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1221656#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 1221651#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1221652#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1221645#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1221646#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1209637#L962-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1209638#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1212261#L966-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1212262#L2702-110 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1222464#isFloorCalling_returnLabel#111 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 1226757#L935-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 1226756#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret31#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1226755#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1226753#L1115-8 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1226754#L1117-8 assume !(0 != ~persons_0~0); 1228545#L1117-9 assume !(0 != ~persons_1~0); 1228521#L1131-4 assume !(0 != ~persons_2~0); 1228504#L1145-4 assume !(0 != ~persons_3~0); 1228501#L1159-4 assume !(0 != ~persons_4~0); 1228496#L1173-4 assume !(0 != ~persons_5~0); 1228492#L1187-4 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~5#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~9#1;havoc processWaitingOnFloor_~tmp___0~5#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1228491#L2793-48 assume 0 == isPersonOnFloor_~floor#1; 1228403#L2794-24 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1228383#isPersonOnFloor_returnLabel#25 processWaitingOnFloor_#t~ret33#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~5#1 := processWaitingOnFloor_#t~ret33#1;havoc processWaitingOnFloor_#t~ret33#1; 1228381#L1016-12 assume !(0 != processWaitingOnFloor_~tmp___0~5#1); 1228379#L1016-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1228378#L2793-50 assume 0 == isPersonOnFloor_~floor#1; 1228147#L2794-25 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1228121#isPersonOnFloor_returnLabel#26 processWaitingOnFloor_#t~ret35#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret35#1;havoc processWaitingOnFloor_#t~ret35#1; 1228113#L1029-12 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1228110#L1029-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1228109#L2793-52 assume 0 == isPersonOnFloor_~floor#1; 1228068#L2794-26 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1228066#isPersonOnFloor_returnLabel#27 processWaitingOnFloor_#t~ret37#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret37#1;havoc processWaitingOnFloor_#t~ret37#1; 1228064#L1042-12 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1228062#L1042-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1228060#L2793-54 assume 0 == isPersonOnFloor_~floor#1; 1228021#L2794-27 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1228012#isPersonOnFloor_returnLabel#28 processWaitingOnFloor_#t~ret39#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret39#1;havoc processWaitingOnFloor_#t~ret39#1; 1228010#L1055-12 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1228008#L1055-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1228007#L2793-56 assume 0 == isPersonOnFloor_~floor#1; 1227976#L2794-28 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1227951#isPersonOnFloor_returnLabel#29 processWaitingOnFloor_#t~ret41#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret41#1;havoc processWaitingOnFloor_#t~ret41#1; 1227942#L1068-12 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1227940#L1068-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1227939#L2793-58 assume 0 == isPersonOnFloor_~floor#1; 1227922#L2794-29 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1227896#isPersonOnFloor_returnLabel#30 processWaitingOnFloor_#t~ret43#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret43#1;havoc processWaitingOnFloor_#t~ret43#1; 1227893#L1081-12 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1227891#L1081-14 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1227889#L2737-68 assume !(0 == resetCallOnFloor_~floorID#1); 1227887#L2740-68 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 1227884#L2749-104 assume { :end_inline_resetCallOnFloor } true; 1227883#processWaitingOnFloor_returnLabel#5 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1227882#L264-8 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1227877#L276-14 assume { :end_inline_resetFloorButton } true; 1227876#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1221759#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1221760#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1221755#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1221756#L1697-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1221749#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 1221750#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 1221744#L1702-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 1221743#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1221699#timeShift_returnLabel#5 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1221700#L2415-2 assume !false; 1211557#L2416 [2022-12-13 13:23:48,846 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:23:48,846 INFO L85 PathProgramCache]: Analyzing trace with hash -1775678488, now seen corresponding path program 2 times [2022-12-13 13:23:48,846 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:23:48,846 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1512745001] [2022-12-13 13:23:48,846 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:23:48,847 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:23:48,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:23:48,966 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:23:48,966 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:23:48,966 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1512745001] [2022-12-13 13:23:48,966 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1512745001] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:23:48,966 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:23:48,966 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 13:23:48,966 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2058145920] [2022-12-13 13:23:48,967 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:23:48,967 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 13:23:48,967 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:23:48,967 INFO L85 PathProgramCache]: Analyzing trace with hash 667873277, now seen corresponding path program 1 times [2022-12-13 13:23:48,967 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:23:48,967 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1786699152] [2022-12-13 13:23:48,968 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:23:48,968 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:23:48,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:23:49,020 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:23:49,020 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:23:49,020 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1786699152] [2022-12-13 13:23:49,021 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1786699152] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:23:49,021 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:23:49,021 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 13:23:49,021 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1795283963] [2022-12-13 13:23:49,021 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:23:49,021 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 13:23:49,021 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:23:49,022 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 13:23:49,022 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 13:23:49,022 INFO L87 Difference]: Start difference. First operand 66801 states and 124028 transitions. cyclomatic complexity: 57245 Second operand has 5 states, 5 states have (on average 15.4) internal successors, (77), 5 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:23:51,195 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:23:51,195 INFO L93 Difference]: Finished difference Result 95196 states and 174169 transitions. [2022-12-13 13:23:51,195 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 95196 states and 174169 transitions. [2022-12-13 13:23:51,606 INFO L131 ngComponentsAnalysis]: Automaton has 22 accepting balls. 29471 [2022-12-13 13:23:51,795 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 95196 states to 95196 states and 174169 transitions. [2022-12-13 13:23:51,795 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 70431 [2022-12-13 13:23:51,836 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 70431 [2022-12-13 13:23:51,837 INFO L73 IsDeterministic]: Start isDeterministic. Operand 95196 states and 174169 transitions. [2022-12-13 13:23:51,837 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 13:23:51,837 INFO L218 hiAutomatonCegarLoop]: Abstraction has 95196 states and 174169 transitions. [2022-12-13 13:23:51,881 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95196 states and 174169 transitions. [2022-12-13 13:23:52,526 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95196 to 66801. [2022-12-13 13:23:52,571 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66801 states, 66801 states have (on average 1.8353467762458646) internal successors, (122603), 66800 states have internal predecessors, (122603), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:23:52,673 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66801 states to 66801 states and 122603 transitions. [2022-12-13 13:23:52,674 INFO L240 hiAutomatonCegarLoop]: Abstraction has 66801 states and 122603 transitions. [2022-12-13 13:23:52,674 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 13:23:52,675 INFO L428 stractBuchiCegarLoop]: Abstraction has 66801 states and 122603 transitions. [2022-12-13 13:23:52,675 INFO L335 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2022-12-13 13:23:52,675 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 66801 states and 122603 transitions. [2022-12-13 13:23:52,823 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 21917 [2022-12-13 13:23:52,823 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 13:23:52,823 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 13:23:52,826 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:23:52,826 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:23:52,826 INFO L748 eck$LassoCheckResult]: Stem: 1343836#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1343837#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 1350482#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1350049#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 1345463#valid_product_returnLabel#1 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 1345464#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 1347716#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1344301#L2188 assume !(0 == getOrigin_~person#1); 1344302#L2192 assume !(1 == getOrigin_~person#1); 1346404#L2196 assume !(2 == getOrigin_~person#1); 1346405#L2200 assume !(3 == getOrigin_~person#1); 1348483#L2204 assume !(4 == getOrigin_~person#1); 1349619#L2208 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1349520#getOrigin_returnLabel#1 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1349521#L2973 assume 0 == initPersonOnFloor_~floor#1; 1348499#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1343518#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1347038#L2765 assume !(0 == callOnFloor_~floorID#1); 1349173#L2768 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1345484#L2777-2 assume { :end_inline_callOnFloor } true; 1346263#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1346264#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1349893#L2702 assume !(0 == isFloorCalling_~floorID#1); 1349476#L2706 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1345553#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1351613#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1351611#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1350639#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1350640#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1361327#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1361326#L1115 assume !(0 != timeShift_~tmp___9~2#1); 1361325#L1206 assume !(1 == ~doorState~0); 1361324#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1361322#L2702-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1361323#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1362085#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1349857#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1349858#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1362012#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1362011#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1351710#L902 assume !(1 == ~currentHeading~0); 1351711#L912 assume !(0 == ~currentFloorID~0); 1351193#L912-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1351194#L918-1 assume { :end_inline_continueInDirection } true; 1361990#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1361100#L2702-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1361099#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1361098#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1361091#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1361088#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1361086#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1361085#L2702-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1361082#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1361081#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1355177#L962-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1348950#L2702-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1345181#isFloorCalling_returnLabel#29 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 1348776#L935-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 1348777#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1348674#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1348225#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 1348227#L1206-3 assume !(1 == ~doorState~0); 1348867#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1348868#L2702-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1351132#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1368743#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1368723#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1368721#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1368720#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1368719#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1350735#L902-3 assume !(1 == ~currentHeading~0); 1350736#L912-9 assume !(0 == ~currentFloorID~0); 1347491#L912-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1348473#L918-7 assume { :end_inline_continueInDirection } true; 1367484#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1347492#L2702-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1347493#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1348048#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1348049#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1367480#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1348616#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1348617#L2702-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1351656#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1368681#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1368665#L962-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1368627#L2702-54 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1368620#isFloorCalling_returnLabel#55 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 1368610#L935-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 1368604#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1367456#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1345658#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 1345660#L1206-6 assume !(1 == ~doorState~0); 1347651#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1343436#L2702-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1343437#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1345497#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1345498#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1347910#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1344836#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1348577#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1350830#L902-6 assume !(1 == ~currentHeading~0); 1350831#L912-18 assume !(0 == ~currentFloorID~0); 1347318#L912-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1345800#L918-13 assume { :end_inline_continueInDirection } true; 1345221#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1346626#L2702-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1351189#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1351362#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1367446#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1347421#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1344243#timeShift_returnLabel#3 assume { :end_inline_timeShift } true; 1343423#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1343424#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1344289#getOrigin_returnLabel#2 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1344566#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 1346117#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1343668#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1348722#L2765-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1350293#L2777-5 assume { :end_inline_callOnFloor } true; 1363648#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 1363647#bobCall_returnLabel#1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1363547#L2702-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1363516#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1363375#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1363374#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1351062#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1351063#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1347580#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1369187#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 1369186#L1206-9 assume !(1 == ~doorState~0); 1369185#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1369184#L2702-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1369183#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1369182#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1369179#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1369180#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1370853#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1370851#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1348501#L902-9 assume !(1 == ~currentHeading~0); 1348503#L912-27 assume !(0 == ~currentFloorID~0); 1350803#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1350804#L918-19 assume { :end_inline_continueInDirection } true; 1345014#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1345015#L2702-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1349015#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1349016#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1351470#L1697-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1379718#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 1379717#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 1379714#L1702-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 1379713#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1379712#timeShift_returnLabel#4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1379709#L2415-2 assume !false; 1379710#L2416 [2022-12-13 13:23:52,826 INFO L750 eck$LassoCheckResult]: Loop: 1379710#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1399100#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1399101#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 1400243#L2423 assume 1 != cleanup_~tmp___0~11#1; 1400242#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1400239#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1400237#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 1400235#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1400233#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1400231#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 1400229#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1400227#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1391133#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1400223#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1399087#L962-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1399085#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1399086#L966-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1400176#L2702-110 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1400174#isFloorCalling_returnLabel#111 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 1400057#L935-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 1400055#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret31#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1400052#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1400049#L1115-8 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1400050#L1117-8 assume !(0 != ~persons_0~0); 1404242#L1117-9 assume !(0 != ~persons_1~0); 1404218#L1131-4 assume !(0 != ~persons_2~0); 1404194#L1145-4 assume !(0 != ~persons_3~0); 1404174#L1159-4 assume !(0 != ~persons_4~0); 1404137#L1173-4 assume !(0 != ~persons_5~0); 1402969#L1187-4 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~5#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~9#1;havoc processWaitingOnFloor_~tmp___0~5#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1402968#L2793-48 assume 0 == isPersonOnFloor_~floor#1; 1399904#L2794-24 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1399886#isPersonOnFloor_returnLabel#25 processWaitingOnFloor_#t~ret33#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~5#1 := processWaitingOnFloor_#t~ret33#1;havoc processWaitingOnFloor_#t~ret33#1; 1402929#L1016-12 assume !(0 != processWaitingOnFloor_~tmp___0~5#1); 1400445#L1016-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1400443#L2793-50 assume 0 == isPersonOnFloor_~floor#1; 1400444#L2794-25 assume !(0 == isPersonOnFloor_~person#1); 1400436#L2798-25 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1400413#isPersonOnFloor_returnLabel#26 processWaitingOnFloor_#t~ret35#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret35#1;havoc processWaitingOnFloor_#t~ret35#1; 1400411#L1029-12 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1400409#L1029-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1400408#L2793-52 assume 0 == isPersonOnFloor_~floor#1; 1399610#L2794-26 assume !(0 == isPersonOnFloor_~person#1); 1399611#L2798-26 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1400370#isPersonOnFloor_returnLabel#27 processWaitingOnFloor_#t~ret37#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret37#1;havoc processWaitingOnFloor_#t~ret37#1; 1400368#L1042-12 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1400367#L1042-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1400366#L2793-54 assume 0 == isPersonOnFloor_~floor#1; 1399435#L2794-27 assume !(0 == isPersonOnFloor_~person#1); 1399436#L2798-27 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1400342#isPersonOnFloor_returnLabel#28 processWaitingOnFloor_#t~ret39#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret39#1;havoc processWaitingOnFloor_#t~ret39#1; 1400340#L1055-12 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1400339#L1055-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1400337#L2793-56 assume 0 == isPersonOnFloor_~floor#1; 1400338#L2794-28 assume !(0 == isPersonOnFloor_~person#1); 1399254#L2798-28 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1399227#isPersonOnFloor_returnLabel#29 processWaitingOnFloor_#t~ret41#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret41#1;havoc processWaitingOnFloor_#t~ret41#1; 1399222#L1068-12 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1399220#L1068-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1399217#L2793-58 assume 0 == isPersonOnFloor_~floor#1; 1399218#L2794-29 assume !(0 == isPersonOnFloor_~person#1); 1399228#L2798-29 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1399150#isPersonOnFloor_returnLabel#30 processWaitingOnFloor_#t~ret43#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret43#1;havoc processWaitingOnFloor_#t~ret43#1; 1399151#L1081-12 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1399142#L1081-14 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1399143#L2737-68 assume !(0 == resetCallOnFloor_~floorID#1); 1399138#L2740-68 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 1399136#L2749-104 assume { :end_inline_resetCallOnFloor } true; 1399131#processWaitingOnFloor_returnLabel#5 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1399132#L264-8 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1399124#L276-14 assume { :end_inline_resetFloorButton } true; 1399121#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1399117#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1394794#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1399114#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1399115#L1697-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1399110#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 1399111#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 1399106#L1702-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 1399104#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1399103#timeShift_returnLabel#5 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1399102#L2415-2 assume !false; 1379710#L2416 [2022-12-13 13:23:52,827 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:23:52,827 INFO L85 PathProgramCache]: Analyzing trace with hash -1775678488, now seen corresponding path program 3 times [2022-12-13 13:23:52,827 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:23:52,827 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1159058366] [2022-12-13 13:23:52,827 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:23:52,827 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:23:52,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:23:52,950 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:23:52,951 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:23:52,951 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1159058366] [2022-12-13 13:23:52,951 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1159058366] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:23:52,951 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:23:52,951 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 13:23:52,951 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1095653822] [2022-12-13 13:23:52,951 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:23:52,952 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 13:23:52,952 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:23:52,952 INFO L85 PathProgramCache]: Analyzing trace with hash 1488176235, now seen corresponding path program 1 times [2022-12-13 13:23:52,952 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:23:52,952 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [142847150] [2022-12-13 13:23:52,952 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:23:52,952 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:23:52,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:23:52,986 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:23:52,986 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:23:52,986 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [142847150] [2022-12-13 13:23:52,986 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [142847150] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:23:52,986 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:23:52,986 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 13:23:52,986 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [794430631] [2022-12-13 13:23:52,986 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:23:52,987 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 13:23:52,987 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:23:52,987 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 13:23:52,987 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 13:23:52,987 INFO L87 Difference]: Start difference. First operand 66801 states and 122603 transitions. cyclomatic complexity: 55820 Second operand has 3 states, 3 states have (on average 27.333333333333332) internal successors, (82), 3 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:23:54,264 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:23:54,264 INFO L93 Difference]: Finished difference Result 99298 states and 180779 transitions. [2022-12-13 13:23:54,264 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 99298 states and 180779 transitions. [2022-12-13 13:23:54,590 INFO L131 ngComponentsAnalysis]: Automaton has 22 accepting balls. 30858 [2022-12-13 13:23:54,964 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 99298 states to 99298 states and 180779 transitions. [2022-12-13 13:23:54,964 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 73541 [2022-12-13 13:23:55,011 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 73541 [2022-12-13 13:23:55,011 INFO L73 IsDeterministic]: Start isDeterministic. Operand 99298 states and 180779 transitions. [2022-12-13 13:23:55,031 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 13:23:55,031 INFO L218 hiAutomatonCegarLoop]: Abstraction has 99298 states and 180779 transitions. [2022-12-13 13:23:55,092 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 99298 states and 180779 transitions. [2022-12-13 13:23:55,846 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 99298 to 66801. [2022-12-13 13:23:55,903 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66801 states, 66801 states have (on average 1.8182811634556368) internal successors, (121463), 66800 states have internal predecessors, (121463), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:23:56,101 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66801 states to 66801 states and 121463 transitions. [2022-12-13 13:23:56,102 INFO L240 hiAutomatonCegarLoop]: Abstraction has 66801 states and 121463 transitions. [2022-12-13 13:23:56,102 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 13:23:56,103 INFO L428 stractBuchiCegarLoop]: Abstraction has 66801 states and 121463 transitions. [2022-12-13 13:23:56,103 INFO L335 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2022-12-13 13:23:56,103 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 66801 states and 121463 transitions. [2022-12-13 13:23:56,445 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 21917 [2022-12-13 13:23:56,445 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 13:23:56,445 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 13:23:56,448 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:23:56,449 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:23:56,449 INFO L748 eck$LassoCheckResult]: Stem: 1509940#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1509941#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 1516606#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1516158#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 1511556#valid_product_returnLabel#1 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 1511557#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 1513823#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1510402#L2188 assume !(0 == getOrigin_~person#1); 1510403#L2192 assume !(1 == getOrigin_~person#1); 1512510#L2196 assume !(2 == getOrigin_~person#1); 1512511#L2200 assume !(3 == getOrigin_~person#1); 1514590#L2204 assume !(4 == getOrigin_~person#1); 1515717#L2208 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1515628#getOrigin_returnLabel#1 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1515629#L2973 assume 0 == initPersonOnFloor_~floor#1; 1514606#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1509623#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1513135#L2765 assume !(0 == callOnFloor_~floorID#1); 1515292#L2768 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1511579#L2777-2 assume { :end_inline_callOnFloor } true; 1512372#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1512373#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1515995#L2702 assume !(0 == isFloorCalling_~floorID#1); 1515578#L2706 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1511642#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1517738#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1517737#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1516767#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1516768#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1524491#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1524490#L1115 assume !(0 != timeShift_~tmp___9~2#1); 1524489#L1206 assume !(1 == ~doorState~0); 1524488#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1524487#L2702-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1515944#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1512293#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1512294#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1515956#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1525294#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1525293#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1525292#L902 assume !(1 == ~currentHeading~0); 1517820#L912 assume !(0 == ~currentFloorID~0); 1517819#L912-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1525256#L918-1 assume { :end_inline_continueInDirection } true; 1525249#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1525247#L2702-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1517795#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1523412#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1523407#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1523404#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1523403#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1523400#L2702-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1517783#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1523393#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1523391#L962-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1515072#L2702-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1511276#isFloorCalling_returnLabel#29 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 1514895#L935-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 1514896#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1516082#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1528017#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 1527795#L1206-3 assume !(1 == ~doorState~0); 1527785#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1527777#L2702-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1517789#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1527705#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1527219#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1527215#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1527202#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1527199#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1524396#L902-3 assume !(1 == ~currentHeading~0); 1523426#L912-9 assume !(0 == ~currentFloorID~0); 1523418#L912-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1523414#L918-7 assume { :end_inline_continueInDirection } true; 1523411#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1523405#L2702-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1521313#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1523401#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1523396#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1523394#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1523392#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1521302#L2702-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1521301#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1521300#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1521299#L962-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1516582#L2702-54 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1510848#isFloorCalling_returnLabel#55 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 1515691#L935-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 1510728#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1511430#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1511431#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 1511758#L1206-6 assume !(1 == ~doorState~0); 1515957#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1509542#L2702-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1509543#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1515524#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1528536#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1528538#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1534637#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1528530#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1528527#L902-6 assume !(1 == ~currentHeading~0); 1528528#L912-18 assume !(0 == ~currentFloorID~0); 1534581#L912-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1534180#L918-13 assume { :end_inline_continueInDirection } true; 1534179#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1534178#L2702-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1517780#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1515993#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1515994#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1513527#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1510344#timeShift_returnLabel#3 assume { :end_inline_timeShift } true; 1509523#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1509524#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1510390#getOrigin_returnLabel#2 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1510669#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 1512218#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1509774#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1516405#L2765-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1511612#L2777-5 assume { :end_inline_callOnFloor } true; 1513193#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 1515998#bobCall_returnLabel#1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1515999#L2702-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1512246#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1512247#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1512127#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1512128#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1517180#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1513688#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1535447#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 1535446#L1206-9 assume !(1 == ~doorState~0); 1535445#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1535444#L2702-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1535443#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1535442#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1535440#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1535438#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1535437#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1535435#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1535303#L902-9 assume !(1 == ~currentHeading~0); 1535304#L912-27 assume !(0 == ~currentFloorID~0); 1516931#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1516932#L918-19 assume { :end_inline_continueInDirection } true; 1511102#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1511103#L2702-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1535804#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1535803#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1512530#L1697-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1512531#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 1512851#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 1512852#L1702-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 1511195#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1511196#timeShift_returnLabel#4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1545791#L2415-2 assume !false; 1545842#L2416 [2022-12-13 13:23:56,449 INFO L750 eck$LassoCheckResult]: Loop: 1545842#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1568614#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1568613#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 1568612#L2423 assume 1 != cleanup_~tmp___0~11#1; 1567868#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1567869#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1568449#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 1554943#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1554928#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1554925#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 1554926#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1545807#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1545806#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1545805#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1545797#L962-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1545795#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1545796#L966-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1567883#L2702-110 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1515819#isFloorCalling_returnLabel#111 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 1515820#L935-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 1569481#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret31#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1569479#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1569476#L1115-8 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1569477#L1117-8 assume !(0 != ~persons_0~0); 1570901#L1117-9 assume !(0 != ~persons_1~0); 1570884#L1131-4 assume !(0 != ~persons_2~0); 1570629#L1145-4 assume !(0 != ~persons_3~0); 1570626#L1159-4 assume !(0 != ~persons_4~0); 1570619#L1173-4 assume !(0 != ~persons_5~0); 1570134#L1187-4 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~5#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~9#1;havoc processWaitingOnFloor_~tmp___0~5#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1570133#L2793-48 assume 0 == isPersonOnFloor_~floor#1; 1570118#L2794-24 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1570086#isPersonOnFloor_returnLabel#25 processWaitingOnFloor_#t~ret33#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~5#1 := processWaitingOnFloor_#t~ret33#1;havoc processWaitingOnFloor_#t~ret33#1; 1570081#L1016-12 assume !(0 != processWaitingOnFloor_~tmp___0~5#1); 1569581#L1016-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1569577#L2793-50 assume 0 == isPersonOnFloor_~floor#1; 1569575#L2794-25 assume !(0 == isPersonOnFloor_~person#1); 1569571#L2798-25 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1569544#isPersonOnFloor_returnLabel#26 processWaitingOnFloor_#t~ret35#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret35#1;havoc processWaitingOnFloor_#t~ret35#1; 1569542#L1029-12 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1569275#L1029-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1569273#L2793-52 assume 0 == isPersonOnFloor_~floor#1; 1569271#L2794-26 assume !(0 == isPersonOnFloor_~person#1); 1569269#L2798-26 assume !(1 == isPersonOnFloor_~person#1); 1569186#L2802-26 assume 2 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_2_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1569174#isPersonOnFloor_returnLabel#27 processWaitingOnFloor_#t~ret37#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret37#1;havoc processWaitingOnFloor_#t~ret37#1; 1569089#L1042-12 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1569050#L1042-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1569046#L2793-54 assume 0 == isPersonOnFloor_~floor#1; 1569047#L2794-27 assume !(0 == isPersonOnFloor_~person#1); 1569147#L2798-27 assume !(1 == isPersonOnFloor_~person#1); 1568995#L2802-27 assume 2 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_2_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1568977#isPersonOnFloor_returnLabel#28 processWaitingOnFloor_#t~ret39#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret39#1;havoc processWaitingOnFloor_#t~ret39#1; 1568975#L1055-12 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1568972#L1055-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1568968#L2793-56 assume 0 == isPersonOnFloor_~floor#1; 1568965#L2794-28 assume !(0 == isPersonOnFloor_~person#1); 1568962#L2798-28 assume !(1 == isPersonOnFloor_~person#1); 1568938#L2802-28 assume 2 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_2_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1568937#isPersonOnFloor_returnLabel#29 processWaitingOnFloor_#t~ret41#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret41#1;havoc processWaitingOnFloor_#t~ret41#1; 1568934#L1068-12 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1568930#L1068-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1568927#L2793-58 assume 0 == isPersonOnFloor_~floor#1; 1568925#L2794-29 assume !(0 == isPersonOnFloor_~person#1); 1568913#L2798-29 assume !(1 == isPersonOnFloor_~person#1); 1568901#L2802-29 assume 2 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_2_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1568884#isPersonOnFloor_returnLabel#30 processWaitingOnFloor_#t~ret43#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret43#1;havoc processWaitingOnFloor_#t~ret43#1; 1568881#L1081-12 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1568879#L1081-14 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1568877#L2737-68 assume !(0 == resetCallOnFloor_~floorID#1); 1568875#L2740-68 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 1568872#L2749-104 assume { :end_inline_resetCallOnFloor } true; 1568871#processWaitingOnFloor_returnLabel#5 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1568870#L264-8 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1568865#L276-14 assume { :end_inline_resetFloorButton } true; 1568848#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1568847#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1561760#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1568846#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1568842#L1697-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1568840#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 1568768#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 1568761#L1702-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 1568758#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1568757#timeShift_returnLabel#5 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1568710#L2415-2 assume !false; 1545842#L2416 [2022-12-13 13:23:56,450 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:23:56,450 INFO L85 PathProgramCache]: Analyzing trace with hash -1775678488, now seen corresponding path program 4 times [2022-12-13 13:23:56,450 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:23:56,450 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1913334719] [2022-12-13 13:23:56,450 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:23:56,450 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:23:56,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:23:56,590 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:23:56,590 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:23:56,590 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1913334719] [2022-12-13 13:23:56,590 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1913334719] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:23:56,590 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:23:56,590 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 13:23:56,590 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1754760695] [2022-12-13 13:23:56,591 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:23:56,591 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 13:23:56,591 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:23:56,591 INFO L85 PathProgramCache]: Analyzing trace with hash -549984499, now seen corresponding path program 1 times [2022-12-13 13:23:56,591 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:23:56,591 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [275317379] [2022-12-13 13:23:56,591 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:23:56,592 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:23:56,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:23:56,617 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:23:56,617 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:23:56,617 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [275317379] [2022-12-13 13:23:56,617 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [275317379] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:23:56,617 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:23:56,618 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 13:23:56,618 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [60133165] [2022-12-13 13:23:56,618 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:23:56,618 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 13:23:56,618 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:23:56,618 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 13:23:56,618 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 13:23:56,619 INFO L87 Difference]: Start difference. First operand 66801 states and 121463 transitions. cyclomatic complexity: 54680 Second operand has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:23:57,757 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:23:57,758 INFO L93 Difference]: Finished difference Result 113970 states and 207030 transitions. [2022-12-13 13:23:57,758 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 113970 states and 207030 transitions. [2022-12-13 13:23:58,206 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 38134 [2022-12-13 13:23:58,445 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 113970 states to 113970 states and 207030 transitions. [2022-12-13 13:23:58,446 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 84530 [2022-12-13 13:23:58,491 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 84530 [2022-12-13 13:23:58,491 INFO L73 IsDeterministic]: Start isDeterministic. Operand 113970 states and 207030 transitions. [2022-12-13 13:23:58,507 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 13:23:58,507 INFO L218 hiAutomatonCegarLoop]: Abstraction has 113970 states and 207030 transitions. [2022-12-13 13:23:58,557 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 113970 states and 207030 transitions. [2022-12-13 13:23:59,155 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 113970 to 66231. [2022-12-13 13:23:59,200 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66231 states, 66231 states have (on average 1.8081110054204224) internal successors, (119753), 66230 states have internal predecessors, (119753), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:23:59,419 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66231 states to 66231 states and 119753 transitions. [2022-12-13 13:23:59,419 INFO L240 hiAutomatonCegarLoop]: Abstraction has 66231 states and 119753 transitions. [2022-12-13 13:23:59,420 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 13:23:59,420 INFO L428 stractBuchiCegarLoop]: Abstraction has 66231 states and 119753 transitions. [2022-12-13 13:23:59,420 INFO L335 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2022-12-13 13:23:59,420 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 66231 states and 119753 transitions. [2022-12-13 13:23:59,601 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 21727 [2022-12-13 13:23:59,601 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 13:23:59,601 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 13:23:59,603 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:23:59,604 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:23:59,604 INFO L748 eck$LassoCheckResult]: Stem: 1690714#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1690715#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 1697382#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1696944#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 1692318#valid_product_returnLabel#1 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 1692319#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 1694591#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1691171#L2188 assume !(0 == getOrigin_~person#1); 1691172#L2192 assume !(1 == getOrigin_~person#1); 1693265#L2196 assume !(2 == getOrigin_~person#1); 1693266#L2200 assume !(3 == getOrigin_~person#1); 1695353#L2204 assume !(4 == getOrigin_~person#1); 1696500#L2208 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1696403#getOrigin_returnLabel#1 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1696404#L2973 assume 0 == initPersonOnFloor_~floor#1; 1695365#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1690401#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1693898#L2765 assume !(0 == callOnFloor_~floorID#1); 1696057#L2768 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1692340#L2777-2 assume { :end_inline_callOnFloor } true; 1697528#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1691524#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1691525#L2702 assume !(0 == isFloorCalling_~floorID#1); 1696349#L2706 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1692403#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1698553#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1698549#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1698550#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1698535#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1698537#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1698547#L1115 assume !(0 != timeShift_~tmp___9~2#1); 1698542#L1206 assume !(1 == ~doorState~0); 1698534#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1698527#L2702-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1696735#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1693049#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1693050#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1696748#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1710924#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1710921#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1698647#L902 assume !(1 == ~currentHeading~0); 1698648#L912 assume !(0 == ~currentFloorID~0); 1698123#L912-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1698124#L918-1 assume { :end_inline_continueInDirection } true; 1710917#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1710916#L2702-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1698619#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1710915#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1710910#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1710908#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1710842#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1710841#L2702-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1698609#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1710840#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1704331#L962-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1695822#L2702-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1692036#isFloorCalling_returnLabel#29 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 1695646#L935-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 1695647#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1695537#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1695102#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 1695104#L1206-3 assume !(1 == ~doorState~0); 1715505#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1715503#L2702-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1698612#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1715494#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1715493#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1693225#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1693226#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1694999#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1695001#L902-3 assume !(1 == ~currentHeading~0); 1697642#L912-9 assume !(0 == ~currentFloorID~0); 1694358#L912-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1692685#L918-7 assume { :end_inline_continueInDirection } true; 1692686#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1694359#L2702-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1694360#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1694922#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1692483#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1692485#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1694549#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1695480#L2702-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1698607#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1696815#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1696816#L962-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1697363#L2702-54 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1691611#isFloorCalling_returnLabel#55 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 1696472#L935-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 1691491#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1692189#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1692190#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 1692516#L1206-6 assume !(1 == ~doorState~0); 1712686#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1712684#L2702-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1698594#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1712680#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1708358#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1707639#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1707636#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1707633#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1707630#L902-6 assume !(1 == ~currentHeading~0); 1707626#L912-18 assume !(0 == ~currentFloorID~0); 1707624#L912-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1692661#L918-13 assume { :end_inline_continueInDirection } true; 1692074#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1693492#L2702-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1698120#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1696784#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1696785#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1694288#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1691113#timeShift_returnLabel#3 assume { :end_inline_timeShift } true; 1690301#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1690302#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1691159#getOrigin_returnLabel#2 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1691432#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 1692976#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1690549#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1695582#L2765-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1697191#L2777-5 assume { :end_inline_callOnFloor } true; 1706678#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 1706667#bobCall_returnLabel#1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1706660#L2702-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1706616#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1706454#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1706452#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1697971#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1697972#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1694453#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1716702#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 1716701#L1206-9 assume !(1 == ~doorState~0); 1716700#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1716699#L2702-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1716698#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1716697#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1716696#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1716609#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1716608#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1716607#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1695367#L902-9 assume !(1 == ~currentHeading~0); 1691498#L912-27 assume !(0 == ~currentFloorID~0); 1691499#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1697718#L918-19 assume { :end_inline_continueInDirection } true; 1691866#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1691867#L2702-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1695886#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1695887#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1722566#L1697-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1722565#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 1722564#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 1722561#L1702-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 1722560#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1722559#timeShift_returnLabel#4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1722557#L2415-2 assume !false; 1722558#L2416 [2022-12-13 13:23:59,605 INFO L750 eck$LassoCheckResult]: Loop: 1722558#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1739393#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1739394#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 1739389#L2423 assume 1 != cleanup_~tmp___0~11#1; 1739390#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1739385#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1739386#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 1736264#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1736265#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1736254#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 1736255#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1735274#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1735275#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1735271#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1735272#L962-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1735269#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1735270#L966-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1696567#L2702-110 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1696568#isFloorCalling_returnLabel#111 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 1743322#L935-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 1743321#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret31#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1743316#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1743313#L1115-8 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1743314#L1117-8 assume !(0 != ~persons_0~0); 1745155#L1117-9 assume !(0 != ~persons_1~0); 1745131#L1131-4 assume !(0 != ~persons_2~0); 1745112#L1145-4 assume !(0 != ~persons_3~0); 1745110#L1159-4 assume !(0 != ~persons_4~0); 1745097#L1173-4 assume !(0 != ~persons_5~0); 1744965#L1187-4 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~5#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~9#1;havoc processWaitingOnFloor_~tmp___0~5#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1744964#L2793-48 assume 0 == isPersonOnFloor_~floor#1; 1744949#L2794-24 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1744929#isPersonOnFloor_returnLabel#25 processWaitingOnFloor_#t~ret33#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~5#1 := processWaitingOnFloor_#t~ret33#1;havoc processWaitingOnFloor_#t~ret33#1; 1744927#L1016-12 assume !(0 != processWaitingOnFloor_~tmp___0~5#1); 1744925#L1016-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1744924#L2793-50 assume 0 == isPersonOnFloor_~floor#1; 1744923#L2794-25 assume !(0 == isPersonOnFloor_~person#1); 1744912#L2798-25 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1744844#isPersonOnFloor_returnLabel#26 processWaitingOnFloor_#t~ret35#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret35#1;havoc processWaitingOnFloor_#t~ret35#1; 1744834#L1029-12 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 1744754#L1029-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1744752#L2793-52 assume 0 == isPersonOnFloor_~floor#1; 1744753#L2794-26 assume !(0 == isPersonOnFloor_~person#1); 1744742#L2798-26 assume !(1 == isPersonOnFloor_~person#1); 1744725#L2802-26 assume 2 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_2_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1744710#isPersonOnFloor_returnLabel#27 processWaitingOnFloor_#t~ret37#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret37#1;havoc processWaitingOnFloor_#t~ret37#1; 1744707#L1042-12 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1743662#L1042-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1743659#L2793-54 assume 0 == isPersonOnFloor_~floor#1; 1743657#L2794-27 assume !(0 == isPersonOnFloor_~person#1); 1743655#L2798-27 assume !(1 == isPersonOnFloor_~person#1); 1743653#L2802-27 assume !(2 == isPersonOnFloor_~person#1); 1743643#L2806-27 assume 3 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_3_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1743637#isPersonOnFloor_returnLabel#28 processWaitingOnFloor_#t~ret39#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret39#1;havoc processWaitingOnFloor_#t~ret39#1; 1743635#L1055-12 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1743633#L1055-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1743631#L2793-56 assume 0 == isPersonOnFloor_~floor#1; 1743632#L2794-28 assume !(0 == isPersonOnFloor_~person#1); 1743619#L2798-28 assume !(1 == isPersonOnFloor_~person#1); 1743598#L2802-28 assume 2 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_2_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1743518#isPersonOnFloor_returnLabel#29 processWaitingOnFloor_#t~ret41#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret41#1;havoc processWaitingOnFloor_#t~ret41#1; 1743507#L1068-12 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1743457#L1068-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 1743454#L2793-58 assume 0 == isPersonOnFloor_~floor#1; 1743448#L2794-29 assume !(0 == isPersonOnFloor_~person#1); 1743443#L2798-29 assume !(1 == isPersonOnFloor_~person#1); 1743432#L2802-29 assume 2 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_2_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 1743420#isPersonOnFloor_returnLabel#30 processWaitingOnFloor_#t~ret43#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret43#1;havoc processWaitingOnFloor_#t~ret43#1; 1743418#L1081-12 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1743416#L1081-14 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1743414#L2737-68 assume !(0 == resetCallOnFloor_~floorID#1); 1742665#L2740-68 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 1742663#L2749-104 assume { :end_inline_resetCallOnFloor } true; 1742862#processWaitingOnFloor_returnLabel#5 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1742629#L264-8 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1742625#L276-14 assume { :end_inline_resetFloorButton } true; 1742609#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1742610#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1738407#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1739435#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1739418#L1697-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1739419#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 1739413#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 1739414#L1702-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 1739406#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1739407#timeShift_returnLabel#5 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1739398#L2415-2 assume !false; 1722558#L2416 [2022-12-13 13:23:59,606 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:23:59,606 INFO L85 PathProgramCache]: Analyzing trace with hash -1775678488, now seen corresponding path program 5 times [2022-12-13 13:23:59,606 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:23:59,606 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [270835381] [2022-12-13 13:23:59,606 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:23:59,606 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:23:59,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:23:59,792 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:23:59,792 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:23:59,792 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [270835381] [2022-12-13 13:23:59,792 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [270835381] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:23:59,792 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:23:59,792 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 13:23:59,793 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1905198234] [2022-12-13 13:23:59,793 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:23:59,793 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 13:23:59,794 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:23:59,794 INFO L85 PathProgramCache]: Analyzing trace with hash 1468068071, now seen corresponding path program 1 times [2022-12-13 13:23:59,794 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:23:59,794 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2098890064] [2022-12-13 13:23:59,794 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:23:59,794 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:23:59,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:23:59,836 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:23:59,836 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:23:59,836 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2098890064] [2022-12-13 13:23:59,836 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2098890064] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:23:59,836 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:23:59,836 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 13:23:59,837 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [971358099] [2022-12-13 13:23:59,837 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:23:59,837 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 13:23:59,837 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:23:59,837 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 13:23:59,838 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 13:23:59,838 INFO L87 Difference]: Start difference. First operand 66231 states and 119753 transitions. cyclomatic complexity: 53540 Second operand has 3 states, 3 states have (on average 29.0) internal successors, (87), 3 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:24:01,129 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:24:01,129 INFO L93 Difference]: Finished difference Result 109467 states and 197739 transitions. [2022-12-13 13:24:01,129 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 109467 states and 197739 transitions. [2022-12-13 13:24:01,466 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 36633 [2022-12-13 13:24:01,710 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 109467 states to 109467 states and 197739 transitions. [2022-12-13 13:24:01,710 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 81133 [2022-12-13 13:24:01,755 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 81133 [2022-12-13 13:24:01,755 INFO L73 IsDeterministic]: Start isDeterministic. Operand 109467 states and 197739 transitions. [2022-12-13 13:24:01,756 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 13:24:01,756 INFO L218 hiAutomatonCegarLoop]: Abstraction has 109467 states and 197739 transitions. [2022-12-13 13:24:01,929 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109467 states and 197739 transitions. [2022-12-13 13:24:02,550 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109467 to 65946. [2022-12-13 13:24:02,575 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65946 states, 65946 states have (on average 1.794316562035605) internal successors, (118328), 65945 states have internal predecessors, (118328), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:24:02,669 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65946 states to 65946 states and 118328 transitions. [2022-12-13 13:24:02,669 INFO L240 hiAutomatonCegarLoop]: Abstraction has 65946 states and 118328 transitions. [2022-12-13 13:24:02,670 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 13:24:02,671 INFO L428 stractBuchiCegarLoop]: Abstraction has 65946 states and 118328 transitions. [2022-12-13 13:24:02,671 INFO L335 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2022-12-13 13:24:02,671 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 65946 states and 118328 transitions. [2022-12-13 13:24:02,804 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 21632 [2022-12-13 13:24:02,804 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 13:24:02,804 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 13:24:02,807 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:24:02,807 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2022-12-13 13:24:02,807 INFO L748 eck$LassoCheckResult]: Stem: 1866417#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1866418#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 1873001#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1872556#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 1868006#valid_product_returnLabel#1 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 1868007#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 1870253#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1866870#L2188 assume !(0 == getOrigin_~person#1); 1866871#L2192 assume !(1 == getOrigin_~person#1); 1868949#L2196 assume !(2 == getOrigin_~person#1); 1868950#L2200 assume !(3 == getOrigin_~person#1); 1871006#L2204 assume !(4 == getOrigin_~person#1); 1872116#L2208 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1872024#getOrigin_returnLabel#1 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1872025#L2973 assume 0 == initPersonOnFloor_~floor#1; 1871019#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1866109#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1869573#L2765 assume !(0 == callOnFloor_~floorID#1); 1871689#L2768 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1868031#L2777-2 assume { :end_inline_callOnFloor } true; 1868815#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1868816#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1872396#L2702 assume !(0 == isFloorCalling_~floorID#1); 1872398#L2706 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1878957#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1878956#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1874098#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1874099#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1865813#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1865815#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1874080#L1115 assume !(0 != timeShift_~tmp___9~2#1); 1874075#L1206 assume !(1 == ~doorState~0); 1874076#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1874055#L2702-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1874056#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1879163#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1879162#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1879083#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1874414#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1874415#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1879042#L902 assume !(1 == ~currentHeading~0); 1874183#L912 assume !(0 == ~currentFloorID~0); 1874182#L912-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1869422#L918-1 assume { :end_inline_continueInDirection } true; 1869423#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1871252#L2702-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1873129#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1869991#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1869992#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1867351#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1872257#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1869424#L2702-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1869425#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1866251#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1866252#L962-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1868937#L2702-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1867728#isFloorCalling_returnLabel#29 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 1871304#L935-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 1871305#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1872475#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1887627#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 1887626#L1206-3 assume !(1 == ~doorState~0); 1887625#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1887624#L2702-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1885939#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1887623#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1887621#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1887622#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1887701#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1887700#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1885102#L902-3 assume !(1 == ~currentHeading~0); 1885103#L912-9 assume !(0 == ~currentFloorID~0); 1880886#L912-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1880887#L918-7 assume { :end_inline_continueInDirection } true; 1887478#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1887477#L2702-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1885434#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1870587#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1868178#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1868180#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1870210#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1868288#L2702-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1868289#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1887442#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1887441#L962-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1887436#L2702-54 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1887426#isFloorCalling_returnLabel#55 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 1887422#L935-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 1887417#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1887418#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1889917#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 1889916#L1206-6 assume !(1 == ~doorState~0); 1889915#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1889914#L2702-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1889251#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1889913#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1889912#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1889870#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1889869#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1889867#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1889868#L902-6 assume !(1 == ~currentHeading~0); 1890204#L912-18 assume !(0 == ~currentFloorID~0); 1890202#L912-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1889492#L918-13 assume { :end_inline_continueInDirection } true; 1889491#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1889490#L2702-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1889123#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1889489#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1889484#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1889482#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1889481#timeShift_returnLabel#3 assume { :end_inline_timeShift } true; 1889480#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 1889477#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 1889473#getOrigin_returnLabel#2 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1889472#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 1889454#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1889442#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1889441#L2765-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1868064#L2777-5 assume { :end_inline_callOnFloor } true; 1889117#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 1889115#bobCall_returnLabel#1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1889059#L2702-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1868694#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1868695#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1868580#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1868581#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1873564#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1870117#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1884938#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 1884937#L1206-9 assume !(1 == ~doorState~0); 1884934#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1884932#L2702-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1884929#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1884928#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1884927#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1884837#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1884836#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1884834#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1884835#L902-9 assume !(1 == ~currentHeading~0); 1867197#L912-27 assume !(0 == ~currentFloorID~0); 1867198#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1873323#L918-19 assume { :end_inline_continueInDirection } true; 1891954#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1891952#L2702-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1891951#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1891950#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1891949#L1697-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1891948#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 1891947#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 1891944#L1702-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 1891943#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1891942#timeShift_returnLabel#4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1891938#L2415-2 assume !false; 1891940#L2416 [2022-12-13 13:24:02,808 INFO L750 eck$LassoCheckResult]: Loop: 1891940#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1921123#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1921122#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 1921121#L2423 assume 1 != cleanup_~tmp___0~11#1; 1921120#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1921119#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1921118#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 1921117#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1921116#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1921115#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 1921114#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1921113#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1912333#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1921112#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1921111#L962-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1921110#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1921108#L966-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1921109#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1921611#L1115-8 assume !(0 != timeShift_~tmp___9~2#1); 1921609#L1206-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1921607#L1206-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1921605#L2702-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1921603#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1921601#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1921599#L845-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1921536#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1921533#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1921532#L1214-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1921530#L902-12 assume !(1 == ~currentHeading~0); 1921016#L912-36 assume !(0 == ~currentFloorID~0); 1921014#L912-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1920994#L918-25 assume { :end_inline_continueInDirection } true; 1921623#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1921621#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1910979#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1921618#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1921616#L1697-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1921614#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 1921613#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 1921610#L1702-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1921608#areDoorsOpen_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret92#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification14_spec__1_~tmp___1~7#1 := __utac_acc__Specification14_spec__1_#t~ret92#1;havoc __utac_acc__Specification14_spec__1_#t~ret92#1; 1921606#L1708-12 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___1~7#1); 1921604#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1921602#timeShift_returnLabel#5 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1921600#L2415-2 assume !false; 1921598#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1921595#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1921593#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 1921590#L2423 assume 1 != cleanup_~tmp___0~11#1; 1921588#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1921587#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1921584#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 1921583#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1921581#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1921578#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 1921577#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1907207#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1907206#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1907205#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1907204#L962-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1907203#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1907202#L966-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1868790#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1922646#L1115-8 assume !(0 != timeShift_~tmp___9~2#1); 1922644#L1206-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1922642#L1206-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1922640#L2702-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1915866#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1922637#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 1922634#L845-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1921346#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1921344#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1921162#L1214-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 1921158#L902-12 assume !(1 == ~currentHeading~0); 1921156#L912-36 assume !(0 == ~currentFloorID~0); 1920993#L912-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1920992#L918-25 assume { :end_inline_continueInDirection } true; 1920984#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1920985#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1912404#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1920982#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1920978#L1697-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1920979#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 1920974#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 1920975#L1702-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 1921125#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1920970#timeShift_returnLabel#5 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1921124#L2415-2 assume !false; 1891940#L2416 [2022-12-13 13:24:02,808 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:24:02,808 INFO L85 PathProgramCache]: Analyzing trace with hash -1775678488, now seen corresponding path program 6 times [2022-12-13 13:24:02,808 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:24:02,808 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1208838776] [2022-12-13 13:24:02,808 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:24:02,808 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:24:02,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:24:02,925 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:24:02,925 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:24:02,925 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1208838776] [2022-12-13 13:24:02,925 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1208838776] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:24:02,925 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:24:02,925 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 13:24:02,926 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [687508135] [2022-12-13 13:24:02,926 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:24:02,926 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 13:24:02,926 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:24:02,926 INFO L85 PathProgramCache]: Analyzing trace with hash 1077015914, now seen corresponding path program 1 times [2022-12-13 13:24:02,927 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:24:02,927 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1500721167] [2022-12-13 13:24:02,927 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:24:02,927 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:24:02,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:24:02,987 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 41 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:24:02,987 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:24:02,987 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1500721167] [2022-12-13 13:24:02,987 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1500721167] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-13 13:24:02,987 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1406799696] [2022-12-13 13:24:02,987 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:24:02,987 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 13:24:02,988 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:24:02,988 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-13 13:24:02,989 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8d177b2-a113-4edd-8622-10931ba4fb06/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-12-13 13:24:03,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:24:03,086 INFO L263 TraceCheckSpWp]: Trace formula consists of 350 conjuncts, 2 conjunts are in the unsatisfiable core [2022-12-13 13:24:03,089 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 13:24:03,134 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 43 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:24:03,134 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-13 13:24:03,134 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1406799696] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:24:03,134 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-13 13:24:03,135 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5] total 6 [2022-12-13 13:24:03,135 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1761353118] [2022-12-13 13:24:03,135 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:24:03,135 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 13:24:03,135 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:24:03,136 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 13:24:03,136 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-12-13 13:24:03,136 INFO L87 Difference]: Start difference. First operand 65946 states and 118328 transitions. cyclomatic complexity: 52400 Second operand has 3 states, 3 states have (on average 29.333333333333332) internal successors, (88), 3 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:24:03,604 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:24:03,604 INFO L93 Difference]: Finished difference Result 85395 states and 153423 transitions. [2022-12-13 13:24:03,604 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 85395 states and 153423 transitions. [2022-12-13 13:24:03,973 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 27761 [2022-12-13 13:24:04,262 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 85395 states to 85395 states and 153423 transitions. [2022-12-13 13:24:04,262 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 63637 [2022-12-13 13:24:04,293 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 63637 [2022-12-13 13:24:04,293 INFO L73 IsDeterministic]: Start isDeterministic. Operand 85395 states and 153423 transitions. [2022-12-13 13:24:04,296 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 13:24:04,296 INFO L218 hiAutomatonCegarLoop]: Abstraction has 85395 states and 153423 transitions. [2022-12-13 13:24:04,328 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85395 states and 153423 transitions. [2022-12-13 13:24:04,903 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85395 to 85395. [2022-12-13 13:24:04,959 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85395 states, 85395 states have (on average 1.7966274372035833) internal successors, (153423), 85394 states have internal predecessors, (153423), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:24:05,085 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85395 states to 85395 states and 153423 transitions. [2022-12-13 13:24:05,085 INFO L240 hiAutomatonCegarLoop]: Abstraction has 85395 states and 153423 transitions. [2022-12-13 13:24:05,086 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 13:24:05,086 INFO L428 stractBuchiCegarLoop]: Abstraction has 85395 states and 153423 transitions. [2022-12-13 13:24:05,086 INFO L335 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2022-12-13 13:24:05,086 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 85395 states and 153423 transitions. [2022-12-13 13:24:05,333 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 27761 [2022-12-13 13:24:05,333 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 13:24:05,333 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 13:24:05,335 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:24:05,335 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2022-12-13 13:24:05,335 INFO L748 eck$LassoCheckResult]: Stem: 2018035#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2018036#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 2024566#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2024132#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 2019628#valid_product_returnLabel#1 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 2019629#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 2021862#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 2018487#L2188 assume !(0 == getOrigin_~person#1); 2018488#L2192 assume !(1 == getOrigin_~person#1); 2020562#L2196 assume !(2 == getOrigin_~person#1); 2020563#L2200 assume !(3 == getOrigin_~person#1); 2022599#L2204 assume !(4 == getOrigin_~person#1); 2023694#L2208 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 2023601#getOrigin_returnLabel#1 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2023602#L2973 assume 0 == initPersonOnFloor_~floor#1; 2022612#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2017724#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2021192#L2765 assume !(0 == callOnFloor_~floorID#1); 2023281#L2768 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 2019651#L2777-2 assume { :end_inline_callOnFloor } true; 2024705#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 2018839#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2018840#L2702 assume !(0 == isFloorCalling_~floorID#1); 2026330#L2706 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2031626#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2031625#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 2031623#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2031622#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 2031620#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 2031617#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 2031615#L1115 assume !(0 != timeShift_~tmp___9~2#1); 2031613#L1206 assume 1 == ~doorState~0;~doorState~0 := 0; 2031612#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2031610#L2702-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2031611#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2045815#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 2045814#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2024982#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 2020154#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 2022060#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2025394#L902 assume !(1 == ~currentHeading~0); 2034164#L912 assume !(0 == ~currentFloorID~0); 2021555#L912-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2032815#L918-1 assume { :end_inline_continueInDirection } true; 2032814#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2032813#L2702-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2025652#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2032811#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 2032807#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 2032805#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 2032804#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2031300#L2702-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2031299#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2031298#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 2031262#L962-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2023062#L2702-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2019348#isFloorCalling_returnLabel#29 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 2022892#L935-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 2022893#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 2045751#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 2044332#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 2025531#L1206-3 assume !(1 == ~doorState~0); 2022986#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2022987#L2702-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2018851#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2018852#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 2022269#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2022270#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 2048109#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 2048107#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2048108#L902-3 assume !(1 == ~currentHeading~0); 2048172#L912-9 assume !(0 == ~currentFloorID~0); 2048170#L912-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2048072#L918-7 assume { :end_inline_continueInDirection } true; 2048071#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2048070#L2702-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2035445#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2048069#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 2048064#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 2048062#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 2048061#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2048060#L2702-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2025637#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2048059#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 2048058#L962-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2048057#L2702-54 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2024602#isFloorCalling_returnLabel#55 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 2023665#L935-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 2018807#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 2019503#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 2019504#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 2019825#L1206-6 assume !(1 == ~doorState~0); 2021802#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2047051#L2702-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2035354#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2047034#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 2022053#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2022055#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 2019011#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 2022686#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2024917#L902-6 assume !(1 == ~currentHeading~0); 2024918#L912-18 assume !(0 == ~currentFloorID~0); 2021466#L912-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2025133#L918-13 assume { :end_inline_continueInDirection } true; 2042226#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2025271#L2702-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2025272#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2023968#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 2023969#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 2021564#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 2018429#timeShift_returnLabel#3 assume { :end_inline_timeShift } true; 2017630#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 2017631#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 2047966#getOrigin_returnLabel#2 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2047965#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 2020280#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2017869#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2024382#L2765-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2024383#L2777-5 assume { :end_inline_callOnFloor } true; 2038263#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 2038264#bobCall_returnLabel#1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2034982#L2702-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2034983#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2034978#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 2034979#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2025128#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 2025129#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 2047870#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 2021733#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 2021735#L1206-9 assume !(1 == ~doorState~0); 2021994#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2018211#L2702-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2018212#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2047414#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 2047415#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2047218#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 2047198#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 2047193#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2047195#L902-9 assume !(1 == ~currentHeading~0); 2050534#L912-27 assume !(0 == ~currentFloorID~0); 2050535#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2050523#L918-19 assume { :end_inline_continueInDirection } true; 2050524#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2049201#L2702-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2049202#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2049199#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 2049200#L1697-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2053628#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 2053629#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 2053620#L1702-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 2053621#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 2053616#timeShift_returnLabel#4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 2053617#L2415-2 assume !false; 2073415#L2416 [2022-12-13 13:24:05,335 INFO L750 eck$LassoCheckResult]: Loop: 2073415#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 2091772#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 2091770#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 2091768#L2423 assume 1 != cleanup_~tmp___0~11#1; 2091766#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2091764#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2091762#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 2091760#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 2091758#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 2091756#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 2091754#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2091752#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2077524#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2091750#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 2091748#L962-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2091746#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 2091743#L966-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 2091744#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 2093059#L1115-8 assume !(0 != timeShift_~tmp___9~2#1); 2093058#L1206-12 assume !(1 == ~doorState~0); 2093055#L1206-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2093054#L2702-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2093053#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2093052#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 2093047#L845-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2092876#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 2092874#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 2092873#L1214-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2092871#L902-12 assume !(1 == ~currentHeading~0); 2092864#L912-36 assume !(0 == ~currentFloorID~0); 2092860#L912-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2090682#L918-25 assume { :end_inline_continueInDirection } true; 2090681#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2090680#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2077040#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2090679#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 2090678#L1697-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2090677#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 2090676#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 2090675#L1702-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 2090674#areDoorsOpen_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret92#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification14_spec__1_~tmp___1~7#1 := __utac_acc__Specification14_spec__1_#t~ret92#1;havoc __utac_acc__Specification14_spec__1_#t~ret92#1; 2090673#L1708-12 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___1~7#1); 2090672#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 2090671#timeShift_returnLabel#5 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 2090670#L2415-2 assume !false; 2090669#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 2090668#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 2089136#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 2087835#L2423 assume 1 != cleanup_~tmp___0~11#1; 2087834#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2087833#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2087831#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 2087828#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 2076824#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 2076813#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 2076788#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2076783#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2076782#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2076781#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 2076780#L962-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2076779#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 2076755#L966-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 2076754#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 2076483#L1115-8 assume !(0 != timeShift_~tmp___9~2#1); 2076484#L1206-12 assume !(1 == ~doorState~0); 2092256#L1206-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2092579#L2702-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2080767#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2092577#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 2092574#L845-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2092038#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 2092036#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 2092032#L1214-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2091827#L902-12 assume !(1 == ~currentHeading~0); 2091824#L912-36 assume !(0 == ~currentFloorID~0); 2091820#L912-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2091801#L918-25 assume { :end_inline_continueInDirection } true; 2091796#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2091794#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2077680#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2091792#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 2091790#L1697-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2091788#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 2091786#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 2091783#L1702-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 2091778#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 2091776#timeShift_returnLabel#5 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 2091774#L2415-2 assume !false; 2073415#L2416 [2022-12-13 13:24:05,336 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:24:05,336 INFO L85 PathProgramCache]: Analyzing trace with hash 274730410, now seen corresponding path program 1 times [2022-12-13 13:24:05,336 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:24:05,336 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1635767415] [2022-12-13 13:24:05,336 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:24:05,336 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:24:05,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:24:05,470 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:24:05,471 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:24:05,471 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1635767415] [2022-12-13 13:24:05,471 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1635767415] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:24:05,471 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:24:05,471 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 13:24:05,471 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [496192051] [2022-12-13 13:24:05,471 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:24:05,471 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 13:24:05,472 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:24:05,472 INFO L85 PathProgramCache]: Analyzing trace with hash 450376234, now seen corresponding path program 1 times [2022-12-13 13:24:05,472 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:24:05,472 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [690726264] [2022-12-13 13:24:05,472 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:24:05,472 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:24:05,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:24:05,521 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-12-13 13:24:05,521 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:24:05,521 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [690726264] [2022-12-13 13:24:05,521 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [690726264] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:24:05,521 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:24:05,521 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 13:24:05,521 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [207418394] [2022-12-13 13:24:05,521 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:24:05,522 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 13:24:05,522 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:24:05,522 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 13:24:05,522 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 13:24:05,522 INFO L87 Difference]: Start difference. First operand 85395 states and 153423 transitions. cyclomatic complexity: 68046 Second operand has 3 states, 3 states have (on average 29.0) internal successors, (87), 3 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:24:06,223 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:24:06,223 INFO L93 Difference]: Finished difference Result 144696 states and 259483 transitions. [2022-12-13 13:24:06,223 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 144696 states and 259483 transitions. [2022-12-13 13:24:06,837 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 43616 [2022-12-13 13:24:07,144 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 144696 states to 144696 states and 259483 transitions. [2022-12-13 13:24:07,144 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 110603 [2022-12-13 13:24:07,202 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 110603 [2022-12-13 13:24:07,202 INFO L73 IsDeterministic]: Start isDeterministic. Operand 144696 states and 259483 transitions. [2022-12-13 13:24:07,224 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 13:24:07,224 INFO L218 hiAutomatonCegarLoop]: Abstraction has 144696 states and 259483 transitions. [2022-12-13 13:24:07,284 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 144696 states and 259483 transitions. [2022-12-13 13:24:08,424 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 144696 to 144296. [2022-12-13 13:24:08,489 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 144296 states, 144296 states have (on average 1.794720574374896) internal successors, (258971), 144295 states have internal predecessors, (258971), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:24:08,708 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 144296 states to 144296 states and 258971 transitions. [2022-12-13 13:24:08,708 INFO L240 hiAutomatonCegarLoop]: Abstraction has 144296 states and 258971 transitions. [2022-12-13 13:24:08,709 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 13:24:08,710 INFO L428 stractBuchiCegarLoop]: Abstraction has 144296 states and 258971 transitions. [2022-12-13 13:24:08,710 INFO L335 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2022-12-13 13:24:08,710 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 144296 states and 258971 transitions. [2022-12-13 13:24:09,201 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 43536 [2022-12-13 13:24:09,201 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 13:24:09,201 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 13:24:09,203 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:24:09,203 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:24:09,203 INFO L748 eck$LassoCheckResult]: Stem: 2248136#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2248137#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 2254677#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2254244#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 2249727#valid_product_returnLabel#1 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 2249728#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 2251982#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 2248594#L2188 assume !(0 == getOrigin_~person#1); 2248595#L2192 assume !(1 == getOrigin_~person#1); 2250678#L2196 assume !(2 == getOrigin_~person#1); 2250679#L2200 assume !(3 == getOrigin_~person#1); 2252730#L2204 assume !(4 == getOrigin_~person#1); 2253826#L2208 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 2253733#getOrigin_returnLabel#1 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2253734#L2973 assume 0 == initPersonOnFloor_~floor#1; 2252743#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2247825#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2251302#L2765 assume !(0 == callOnFloor_~floorID#1); 2253405#L2768 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 2249750#L2777-2 assume { :end_inline_callOnFloor } true; 2250535#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 2250536#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2254092#L2702 assume !(0 == isFloorCalling_~floorID#1); 2254094#L2706 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2264958#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2264957#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 2264955#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2264954#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 2264952#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 2264949#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 2264948#L1115 assume !(0 != timeShift_~tmp___9~2#1); 2264947#L1206 assume 1 == ~doorState~0;~doorState~0 := 0; 2264946#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2264944#L2702-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2264945#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2267282#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 2267278#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2267279#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 2270831#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 2270829#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2270830#L902 assume !(1 == ~currentHeading~0); 2272084#L912 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2272081#L912-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2266182#L918-1 assume { :end_inline_continueInDirection } true; 2266181#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2266180#L2702-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2258455#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2266178#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 2266174#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 2266172#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 2266171#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2264723#L2702-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2264722#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2264721#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 2263820#L962-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2253184#L2702-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2249449#isFloorCalling_returnLabel#29 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 2253020#L935-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 2253021#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 2254170#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 2274334#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 2274333#L1206-3 assume !(1 == ~doorState~0); 2269286#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2274233#L2702-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2274232#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2274231#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 2274229#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2274004#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 2274003#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 2273997#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2273995#L902-3 assume !(1 == ~currentHeading~0); 2273970#L912-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2273963#L912-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2273964#L918-7 assume { :end_inline_continueInDirection } true; 2279071#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2279065#L2702-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2279063#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2279055#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 2279050#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 2278982#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 2278981#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2278966#L2702-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2278964#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2278962#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 2278961#L962-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2278917#L2702-54 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2278909#isFloorCalling_returnLabel#55 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 2278903#L935-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 2278901#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 2278902#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 2276867#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 2276868#L1206-6 assume !(1 == ~doorState~0); 2290182#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2290180#L2702-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2257527#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2290174#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 2268231#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2268233#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 2292365#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 2292364#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2292363#L902-6 assume !(1 == ~currentHeading~0); 2290232#L912-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2290229#L912-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2290230#L918-13 assume { :end_inline_continueInDirection } true; 2294793#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2294792#L2702-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2286268#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2294791#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 2294786#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 2294784#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 2294783#timeShift_returnLabel#3 assume { :end_inline_timeShift } true; 2294782#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 2294748#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 2294744#getOrigin_returnLabel#2 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2294743#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 2294721#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2294702#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2294700#L2765-2 assume !(0 == callOnFloor_~floorID#1); 2294695#L2768-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 2294693#L2777-5 assume { :end_inline_callOnFloor } true; 2294691#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 2294690#bobCall_returnLabel#1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2294688#L2702-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2284204#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2294685#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 2294682#L962-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2294671#L2702-80 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2294664#isFloorCalling_returnLabel#81 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 2294658#L935-7 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 2294655#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#8 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 2292144#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 2292145#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 2292136#L1206-9 assume !(1 == ~doorState~0); 2292134#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2322481#L2702-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2304600#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2322479#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 2322477#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2292006#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 2291984#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 2291981#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2291983#L902-9 assume !(1 == ~currentHeading~0); 2297515#L912-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2323232#L912-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2335104#L918-19 assume { :end_inline_continueInDirection } true; 2335100#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2335096#L2702-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2304422#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2335088#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 2335077#L1697-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 2335074#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 2335071#timeShift_returnLabel#4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 2335068#L2415-2 assume !false; 2335069#L2416 [2022-12-13 13:24:09,204 INFO L750 eck$LassoCheckResult]: Loop: 2335069#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 2380896#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 2380895#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 2380886#L2423 assume 1 != cleanup_~tmp___0~11#1; 2380885#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2380884#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2380883#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 2380834#L401 assume !(0 != anyStopRequested_~tmp___3~0#1); 2380811#L405 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 2380805#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 2380803#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 2380801#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2380799#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2360294#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2380797#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 2380796#L962-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2380788#L2702-111 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2380774#isFloorCalling_returnLabel#112 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 2380767#L935-9 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 2380763#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#10 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 2380761#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 2380758#L1115-8 assume !(0 != timeShift_~tmp___9~2#1); 2380755#L1206-12 assume !(1 == ~doorState~0); 2380751#L1206-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2380750#L2702-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2360789#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2380749#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 2380747#L845-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2380707#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 2380703#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 2380700#L1214-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2380701#L902-12 assume !(1 == ~currentHeading~0); 2383313#L912-36 assume !(0 == ~currentFloorID~0); 2383302#L912-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2388677#L918-25 assume { :end_inline_continueInDirection } true; 2388676#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2388674#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2360631#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2388671#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 2388669#L1697-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 2388667#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 2388666#timeShift_returnLabel#5 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 2388665#L2415-2 assume !false; 2388660#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 2388658#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 2388657#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 2388656#L2423 assume 1 != cleanup_~tmp___0~11#1; 2388655#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2388654#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2388653#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 2388648#L401 assume !(0 != anyStopRequested_~tmp___3~0#1); 2388627#L405 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 2388622#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 2388620#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 2388619#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2388618#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2360571#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2388611#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 2388610#L962-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2388599#L2702-111 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2388596#isFloorCalling_returnLabel#112 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 2387421#L935-9 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 2387420#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#10 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 2387419#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 2387415#L1115-8 assume !(0 != timeShift_~tmp___9~2#1); 2387414#L1206-12 assume !(1 == ~doorState~0); 2387410#L1206-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2387409#L2702-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2360465#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2387407#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 2387406#L845-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2387372#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 2387369#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 2387368#L1214-8 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 2387366#L988-8 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 2387342#getReverseHeading_returnLabel#9 timeShift_#t~ret53#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2387341#L2702-123 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2360413#isFloorCalling_returnLabel#124 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2387340#isExecutiveFloorCalling_returnLabel#19 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 2387338#L845-9 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2387336#getCurrentFloorID_returnLabel#19 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 2387332#stopRequestedInDirection_returnLabel#10 timeShift_#t~ret54#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1; 2387329#L1223-12 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 2387328#L988-9 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 2387327#getReverseHeading_returnLabel#10 timeShift_#t~ret55#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2387325#L902-13 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~29#1;isTopFloor_~retValue_acc~29#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~29#1; 2387324#isTopFloor_returnLabel#24 continueInDirection_#t~ret26#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~6#1 := continueInDirection_#t~ret26#1;havoc continueInDirection_#t~ret26#1; 2387322#L906-39 assume !(0 != continueInDirection_~tmp~6#1); 2380947#L912-41 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2380943#L918-27 assume { :end_inline_continueInDirection } true; 2380931#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2380921#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2360356#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2380917#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 2380913#L1697-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 2380907#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 2380901#timeShift_returnLabel#5 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 2380899#L2415-2 assume !false; 2335069#L2416 [2022-12-13 13:24:09,205 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:24:09,205 INFO L85 PathProgramCache]: Analyzing trace with hash -1906295735, now seen corresponding path program 1 times [2022-12-13 13:24:09,205 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:24:09,205 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1723157728] [2022-12-13 13:24:09,205 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:24:09,205 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:24:09,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:24:09,354 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:24:09,354 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:24:09,355 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1723157728] [2022-12-13 13:24:09,355 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1723157728] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:24:09,355 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:24:09,355 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 13:24:09,355 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [853360362] [2022-12-13 13:24:09,355 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:24:09,356 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 13:24:09,356 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:24:09,356 INFO L85 PathProgramCache]: Analyzing trace with hash -1997369976, now seen corresponding path program 1 times [2022-12-13 13:24:09,356 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:24:09,356 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1407710285] [2022-12-13 13:24:09,357 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:24:09,357 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:24:09,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:24:09,443 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-12-13 13:24:09,443 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:24:09,443 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1407710285] [2022-12-13 13:24:09,443 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1407710285] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:24:09,443 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:24:09,443 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 13:24:09,443 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1461782350] [2022-12-13 13:24:09,444 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:24:09,444 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 13:24:09,444 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:24:09,444 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 13:24:09,445 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-13 13:24:09,445 INFO L87 Difference]: Start difference. First operand 144296 states and 258971 transitions. cyclomatic complexity: 114705 Second operand has 7 states, 7 states have (on average 11.285714285714286) internal successors, (79), 7 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:24:17,809 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:24:17,809 INFO L93 Difference]: Finished difference Result 720678 states and 1287042 transitions. [2022-12-13 13:24:17,810 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 720678 states and 1287042 transitions. [2022-12-13 13:24:20,464 INFO L131 ngComponentsAnalysis]: Automaton has 22 accepting balls. 216932 [2022-12-13 13:24:22,344 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 720678 states to 720678 states and 1287042 transitions. [2022-12-13 13:24:22,344 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 505773 [2022-12-13 13:24:22,584 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 505773 [2022-12-13 13:24:22,584 INFO L73 IsDeterministic]: Start isDeterministic. Operand 720678 states and 1287042 transitions. [2022-12-13 13:24:22,636 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 13:24:22,636 INFO L218 hiAutomatonCegarLoop]: Abstraction has 720678 states and 1287042 transitions. [2022-12-13 13:24:23,164 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 720678 states and 1287042 transitions. [2022-12-13 13:24:26,314 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 720678 to 144642. [2022-12-13 13:24:26,413 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 144642 states, 144642 states have (on average 1.7928195130045215) internal successors, (259317), 144641 states have internal predecessors, (259317), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:24:26,811 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 144642 states to 144642 states and 259317 transitions. [2022-12-13 13:24:26,811 INFO L240 hiAutomatonCegarLoop]: Abstraction has 144642 states and 259317 transitions. [2022-12-13 13:24:26,812 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-12-13 13:24:26,812 INFO L428 stractBuchiCegarLoop]: Abstraction has 144642 states and 259317 transitions. [2022-12-13 13:24:26,812 INFO L335 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2022-12-13 13:24:26,812 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 144642 states and 259317 transitions. [2022-12-13 13:24:27,080 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 43646 [2022-12-13 13:24:27,080 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 13:24:27,080 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 13:24:27,082 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:24:27,082 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:24:27,082 INFO L748 eck$LassoCheckResult]: Stem: 3113165#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 3113166#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 3119773#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 3119308#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 3114763#valid_product_returnLabel#1 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 3114764#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 3117006#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 3113624#L2188 assume !(0 == getOrigin_~person#1); 3113625#L2192 assume !(1 == getOrigin_~person#1); 3115699#L2196 assume !(2 == getOrigin_~person#1); 3115700#L2200 assume !(3 == getOrigin_~person#1); 3117754#L2204 assume !(4 == getOrigin_~person#1); 3118871#L2208 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 3118781#getOrigin_returnLabel#1 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3118782#L2973 assume 0 == initPersonOnFloor_~floor#1; 3117767#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 3112855#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 3116329#L2765 assume !(0 == callOnFloor_~floorID#1); 3118442#L2768 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 3114787#L2777-2 assume { :end_inline_callOnFloor } true; 3115559#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 3115560#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3119155#L2702 assume !(0 == isFloorCalling_~floorID#1); 3119156#L2706 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3120877#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3120878#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 3120868#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 3120869#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 3112559#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 3112561#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 3123926#L1115 assume !(0 != timeShift_~tmp___9~2#1); 3123927#L1206 assume !(1 == ~doorState~0); 3125001#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3125002#L2702-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3126242#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3144718#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 3144716#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 3144714#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 3144712#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 3144710#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 3144711#L902 assume !(1 == ~currentHeading~0); 3144976#L912 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3144973#L912-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3143125#L918-1 assume { :end_inline_continueInDirection } true; 3143123#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3143122#L2702-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3126083#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3143120#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 3143116#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 3143114#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 3143113#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3143112#L2702-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3125969#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3143106#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 3143104#L962-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3143103#L2702-28 assume !(0 == isFloorCalling_~floorID#1); 3143100#L2706-28 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3143097#isFloorCalling_returnLabel#29 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 3143095#L935-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 3143093#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 3143092#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 3143091#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 3143089#L1206-3 assume !(1 == ~doorState~0); 3143088#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3143087#L2702-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3125943#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3143086#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 3143084#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 3143082#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 3143002#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 3142957#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 3142871#L902-3 assume !(1 == ~currentHeading~0); 3142856#L912-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3141432#L912-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3141433#L918-7 assume { :end_inline_continueInDirection } true; 3147606#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3147605#L2702-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3120190#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3120191#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 3147603#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 3147602#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 3117881#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3117882#L2702-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3118358#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3118359#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 3119179#L962-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3120957#L2702-54 assume !(0 == isFloorCalling_~floorID#1); 3115190#L2706-54 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3114064#isFloorCalling_returnLabel#55 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 3141089#L935-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 3113942#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 3147589#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 3147588#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 3147586#L1206-6 assume !(1 == ~doorState~0); 3147587#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3147582#L2702-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3147583#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3147579#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 3147580#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 3147574#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 3147573#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 3147568#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 3147462#L902-6 assume !(1 == ~currentHeading~0); 3141079#L912-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3141072#L912-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3141073#L918-13 assume { :end_inline_continueInDirection } true; 3160430#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3160429#L2702-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3160428#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3160426#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 3160422#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 3160420#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 3160419#timeShift_returnLabel#3 assume { :end_inline_timeShift } true; 3160418#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 3160415#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 3160411#getOrigin_returnLabel#2 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3160408#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 3160389#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 3160375#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 3160373#L2765-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 3160374#L2777-5 assume { :end_inline_callOnFloor } true; 3166486#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 3166484#bobCall_returnLabel#1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3166482#L2702-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3165979#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3166480#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 3166478#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 3166476#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 3166461#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 3166462#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 3168020#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 3168017#L1206-9 assume !(1 == ~doorState~0); 3168015#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3168016#L2702-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3168011#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3168012#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 3152856#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 3152857#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 3177267#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 3177266#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 3177265#L902-9 assume !(1 == ~currentHeading~0); 3169095#L912-27 assume !(0 == ~currentFloorID~0); 3120125#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3120126#L918-19 assume { :end_inline_continueInDirection } true; 3159399#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3156241#L2702-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3156242#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3156237#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 3156238#L1697-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 3184681#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 3184680#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 3184677#L1702-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 3184676#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 3184675#timeShift_returnLabel#4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 3184673#L2415-2 assume !false; 3184674#L2416 [2022-12-13 13:24:27,082 INFO L750 eck$LassoCheckResult]: Loop: 3184674#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 3202294#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 3202292#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 3202290#L2423 assume 1 != cleanup_~tmp___0~11#1; 3202281#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3202280#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3202279#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 3202278#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 3202277#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 3202276#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 3202275#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3202274#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3195313#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3202272#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 3202270#L962-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 3202268#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 3202254#L966-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3202253#L2702-110 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3202248#isFloorCalling_returnLabel#111 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 3202245#L935-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 3202242#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret31#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 3202240#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 3202237#L1115-8 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 3202238#L1117-8 assume !(0 != ~persons_0~0); 3202984#L1117-9 assume !(0 != ~persons_1~0); 3202966#L1131-4 assume !(0 != ~persons_2~0); 3202952#L1145-4 assume !(0 != ~persons_3~0); 3202949#L1159-4 assume !(0 != ~persons_4~0); 3202944#L1173-4 assume !(0 != ~persons_5~0); 3202940#L1187-4 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret33#1, processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~5#1, processWaitingOnFloor_~tmp___1~2#1, processWaitingOnFloor_~tmp___2~2#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~9#1;havoc processWaitingOnFloor_~tmp___0~5#1;havoc processWaitingOnFloor_~tmp___1~2#1;havoc processWaitingOnFloor_~tmp___2~2#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 3202939#L2793-48 assume 0 == isPersonOnFloor_~floor#1; 3202870#L2794-24 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 3202841#isPersonOnFloor_returnLabel#25 processWaitingOnFloor_#t~ret33#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~5#1 := processWaitingOnFloor_#t~ret33#1;havoc processWaitingOnFloor_#t~ret33#1; 3202837#L1016-12 assume !(0 != processWaitingOnFloor_~tmp___0~5#1); 3202834#L1016-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 3202826#L2793-50 assume 0 == isPersonOnFloor_~floor#1; 3202827#L2794-25 assume !(0 == isPersonOnFloor_~person#1); 3202725#L2798-25 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 3202699#isPersonOnFloor_returnLabel#26 processWaitingOnFloor_#t~ret35#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~2#1 := processWaitingOnFloor_#t~ret35#1;havoc processWaitingOnFloor_#t~ret35#1; 3202695#L1029-12 assume !(0 != processWaitingOnFloor_~tmp___2~2#1); 3202691#L1029-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 3202689#L2793-52 assume 0 == isPersonOnFloor_~floor#1; 3202657#L2794-26 assume !(0 == isPersonOnFloor_~person#1); 3202655#L2798-26 assume !(1 == isPersonOnFloor_~person#1); 3202530#L2802-26 assume 2 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_2_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 3202524#isPersonOnFloor_returnLabel#27 processWaitingOnFloor_#t~ret37#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret37#1;havoc processWaitingOnFloor_#t~ret37#1; 3202521#L1042-12 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 3202519#L1042-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 3202500#L2793-54 assume 0 == isPersonOnFloor_~floor#1; 3202501#L2794-27 assume !(0 == isPersonOnFloor_~person#1); 3202518#L2798-27 assume !(1 == isPersonOnFloor_~person#1); 3202517#L2802-27 assume !(2 == isPersonOnFloor_~person#1); 3202483#L2806-27 assume 3 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_3_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 3202463#isPersonOnFloor_returnLabel#28 processWaitingOnFloor_#t~ret39#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret39#1;havoc processWaitingOnFloor_#t~ret39#1; 3202456#L1055-12 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 3202448#L1055-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 3202446#L2793-56 assume !(0 == isPersonOnFloor_~floor#1); 3202443#L2826-56 assume !(1 == isPersonOnFloor_~floor#1); 3202444#L2859-56 assume !(2 == isPersonOnFloor_~floor#1); 3202445#L2892-56 assume !(3 == isPersonOnFloor_~floor#1); 3202426#L2925-84 assume !(4 == isPersonOnFloor_~floor#1); 3202413#L2925-86 isPersonOnFloor_~retValue_acc~28#1 := 0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 3202403#isPersonOnFloor_returnLabel#29 processWaitingOnFloor_#t~ret41#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret41#1;havoc processWaitingOnFloor_#t~ret41#1; 3202394#L1068-12 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 3202390#L1068-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~28#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~28#1; 3202388#L2793-58 assume 0 == isPersonOnFloor_~floor#1; 3202377#L2794-29 assume !(0 == isPersonOnFloor_~person#1); 3202371#L2798-29 assume !(1 == isPersonOnFloor_~person#1); 3202359#L2802-29 assume 2 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~28#1 := ~personOnFloor_2_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~28#1; 3202342#isPersonOnFloor_returnLabel#30 processWaitingOnFloor_#t~ret43#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret43#1;havoc processWaitingOnFloor_#t~ret43#1; 3202339#L1081-12 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 3202337#L1081-14 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 3202335#L2737-68 assume !(0 == resetCallOnFloor_~floorID#1); 3202333#L2740-68 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 3202330#L2749-104 assume { :end_inline_resetCallOnFloor } true; 3202329#processWaitingOnFloor_returnLabel#5 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 3202328#L264-8 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 3202323#L276-14 assume { :end_inline_resetFloorButton } true; 3202318#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3202316#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3195386#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3202314#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 3202312#L1697-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 3202310#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14#1 := __utac_acc__Specification14_spec__1_#t~ret90#1;havoc __utac_acc__Specification14_spec__1_#t~ret90#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~14#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~16#1;isExecutiveFloor_~retValue_acc~16#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~16#1; 3202308#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret91#1 := isExecutiveFloor_#res#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10#1 := __utac_acc__Specification14_spec__1_#t~ret91#1;havoc __utac_acc__Specification14_spec__1_#t~ret91#1; 3202303#L1702-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10#1; 3202300#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 3202298#timeShift_returnLabel#5 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 3202296#L2415-2 assume !false; 3184674#L2416 [2022-12-13 13:24:27,082 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:24:27,083 INFO L85 PathProgramCache]: Analyzing trace with hash -27632715, now seen corresponding path program 1 times [2022-12-13 13:24:27,083 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:24:27,083 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [85257653] [2022-12-13 13:24:27,083 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:24:27,083 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:24:27,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:24:27,167 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:24:27,167 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:24:27,167 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [85257653] [2022-12-13 13:24:27,168 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [85257653] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:24:27,168 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:24:27,168 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 13:24:27,168 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2063350433] [2022-12-13 13:24:27,168 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:24:27,168 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 13:24:27,168 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:24:27,169 INFO L85 PathProgramCache]: Analyzing trace with hash 518065735, now seen corresponding path program 1 times [2022-12-13 13:24:27,169 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:24:27,169 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1384678251] [2022-12-13 13:24:27,169 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:24:27,169 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:24:27,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:24:27,235 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:24:27,235 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:24:27,235 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1384678251] [2022-12-13 13:24:27,235 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1384678251] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:24:27,236 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:24:27,236 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-12-13 13:24:27,236 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1818235927] [2022-12-13 13:24:27,236 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:24:27,236 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 13:24:27,236 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:24:27,236 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-12-13 13:24:27,237 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2022-12-13 13:24:27,237 INFO L87 Difference]: Start difference. First operand 144642 states and 259317 transitions. cyclomatic complexity: 114705 Second operand has 9 states, 9 states have (on average 9.88888888888889) internal successors, (89), 9 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:24:44,427 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:24:44,427 INFO L93 Difference]: Finished difference Result 721993 states and 1288561 transitions. [2022-12-13 13:24:44,427 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 721993 states and 1288561 transitions. [2022-12-13 13:24:47,209 INFO L131 ngComponentsAnalysis]: Automaton has 48 accepting balls. 187202 [2022-12-13 13:24:49,104 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 721993 states to 721921 states and 1288489 transitions. [2022-12-13 13:24:49,104 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 540484 [2022-12-13 13:24:49,367 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 540484 [2022-12-13 13:24:49,368 INFO L73 IsDeterministic]: Start isDeterministic. Operand 721921 states and 1288489 transitions. [2022-12-13 13:24:49,420 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 13:24:49,420 INFO L218 hiAutomatonCegarLoop]: Abstraction has 721921 states and 1288489 transitions. [2022-12-13 13:24:49,733 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 721921 states and 1288489 transitions. [2022-12-13 13:24:53,293 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 721921 to 172579. [2022-12-13 13:24:53,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 172579 states, 172579 states have (on average 1.7801876242184738) internal successors, (307223), 172578 states have internal predecessors, (307223), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:24:53,885 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172579 states to 172579 states and 307223 transitions. [2022-12-13 13:24:53,885 INFO L240 hiAutomatonCegarLoop]: Abstraction has 172579 states and 307223 transitions. [2022-12-13 13:24:53,885 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2022-12-13 13:24:53,886 INFO L428 stractBuchiCegarLoop]: Abstraction has 172579 states and 307223 transitions. [2022-12-13 13:24:53,886 INFO L335 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2022-12-13 13:24:53,886 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 172579 states and 307223 transitions. [2022-12-13 13:24:54,181 INFO L131 ngComponentsAnalysis]: Automaton has 30 accepting balls. 51307 [2022-12-13 13:24:54,181 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 13:24:54,181 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 13:24:54,182 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:24:54,182 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:24:54,183 INFO L748 eck$LassoCheckResult]: Stem: 3979908#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 3979909#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 3986355#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 3985897#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 3981401#valid_product_returnLabel#1 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 3981402#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 3983573#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 3980324#L2188 assume !(0 == getOrigin_~person#1); 3980325#L2192 assume !(1 == getOrigin_~person#1); 3982323#L2196 assume !(2 == getOrigin_~person#1); 3982324#L2200 assume !(3 == getOrigin_~person#1); 3984305#L2204 assume !(4 == getOrigin_~person#1); 3985440#L2208 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 3985342#getOrigin_returnLabel#1 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3985343#L2973 assume 0 == initPersonOnFloor_~floor#1; 3984318#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 3979606#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 3982931#L2765 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 3984986#L2777-2 assume { :end_inline_callOnFloor } true; 3982191#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 3982192#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3987562#L2702 assume !(0 == isFloorCalling_~floorID#1); 3985280#L2706 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3981483#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3987577#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 3987566#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 3987567#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 3979319#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 3979321#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 3980161#L1115 assume !(0 != timeShift_~tmp___9~2#1); 3982387#L1206 assume 1 == ~doorState~0;~doorState~0 := 0; 3982388#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3987593#L2702-3 assume !(0 == isFloorCalling_~floorID#1); 3980704#L2706-3 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3980252#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3987655#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 3987656#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 3987649#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 3987650#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 3989398#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 3989376#L902 assume !(1 == ~currentHeading~0); 3989377#L912 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3989325#L912-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3989324#L918-1 assume { :end_inline_continueInDirection } true; 3997552#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3997551#L2702-25 assume !(0 == isFloorCalling_~floorID#1); 3997550#L2706-25 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3997546#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3997545#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 3997540#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 3997538#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 3997537#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3997536#L2702-26 assume !(0 == isFloorCalling_~floorID#1); 3997535#L2706-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3989238#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3989239#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 3989233#L962-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 3989234#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 3989225#L966-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 3989227#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 3996094#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 3996095#L1206-3 assume !(1 == ~doorState~0); 3997590#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3997591#L2702-29 assume !(0 == isFloorCalling_~floorID#1); 3997585#L2706-29 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3997583#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3997578#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 3997579#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 3997571#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 3997572#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 3998005#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 3998007#L902-3 assume !(1 == ~currentHeading~0); 3997999#L912-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3997345#L912-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3996401#L918-7 assume { :end_inline_continueInDirection } true; 4017211#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4017209#L2702-51 assume !(0 == isFloorCalling_~floorID#1); 4017208#L2706-51 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4017204#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4017202#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 4017198#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 4017196#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 4017195#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4017193#L2702-52 assume !(0 == isFloorCalling_~floorID#1); 4017190#L2706-52 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4017185#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4017173#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 4017160#L962-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4017154#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 4017148#L966-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 4017146#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 4017145#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 4017144#L1206-6 assume !(1 == ~doorState~0); 4017143#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4025317#L2702-55 assume !(0 == isFloorCalling_~floorID#1); 4025315#L2706-55 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4025312#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4025311#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 4025309#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4025310#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 4025578#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 4025577#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 4009202#L902-6 assume !(1 == ~currentHeading~0); 4009201#L912-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4006550#L912-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4006551#L918-13 assume { :end_inline_continueInDirection } true; 4004559#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4004560#L2702-77 assume !(0 == isFloorCalling_~floorID#1); 3984061#L2706-77 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3984062#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4004455#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 4004456#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 4023775#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 4023774#timeShift_returnLabel#3 assume { :end_inline_timeShift } true; 4023773#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 4023770#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 4023766#getOrigin_returnLabel#2 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 4023765#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 4023745#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 4023731#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 4023730#L2765-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 4004480#L2777-5 assume { :end_inline_callOnFloor } true; 4023725#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 4023724#bobCall_returnLabel#1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4023722#L2702-78 assume !(0 == isFloorCalling_~floorID#1); 4023624#L2706-78 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4004542#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4004543#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 4022584#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4022585#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 4022548#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 4022549#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 4032703#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 4032705#L1206-9 assume !(1 == ~doorState~0); 4033047#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4033048#L2702-81 assume !(0 == isFloorCalling_~floorID#1); 4033043#L2706-81 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4033040#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4033035#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 4033036#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4036103#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 4036100#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 4036092#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 4036094#L902-9 assume !(1 == ~currentHeading~0); 4048056#L912-27 assume !(0 == ~currentFloorID~0); 4032853#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4032852#L918-19 assume { :end_inline_continueInDirection } true; 4031731#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4031732#L2702-103 assume !(0 == isFloorCalling_~floorID#1); 4031725#L2706-103 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4031724#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4031714#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 4031715#L1697-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 4031706#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 4031707#timeShift_returnLabel#4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 4031701#L2415-2 assume !false; 4031703#L2416 [2022-12-13 13:24:54,183 INFO L750 eck$LassoCheckResult]: Loop: 4031703#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 4107282#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 4107281#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 4107280#L2423 assume 1 != cleanup_~tmp___0~11#1; 4107279#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4107277#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4107278#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 4107243#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 4107228#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 4107226#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 4107225#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4107223#L2702-109 assume !(0 == isFloorCalling_~floorID#1); 4107222#L2706-109 assume !(1 == isFloorCalling_~floorID#1); 4107221#L2710-109 assume !(2 == isFloorCalling_~floorID#1); 4107190#L2714-109 assume !(3 == isFloorCalling_~floorID#1); 4107171#L2718-109 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~27#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4107099#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4107084#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 4107080#L962-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4107081#L2702-111 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4106962#isFloorCalling_returnLabel#112 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 4106963#L935-9 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 4105330#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#10 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 4105331#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 4103554#L1115-8 assume !(0 != timeShift_~tmp___9~2#1); 4103555#L1206-12 assume !(1 == ~doorState~0); 4109157#L1206-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4110834#L2702-112 assume !(0 == isFloorCalling_~floorID#1); 4110836#L2706-112 assume !(1 == isFloorCalling_~floorID#1); 4110813#L2710-112 assume !(2 == isFloorCalling_~floorID#1); 4110814#L2714-112 assume !(3 == isFloorCalling_~floorID#1); 4110809#L2718-112 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~27#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4110810#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4111274#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 4111275#L845-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4111284#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 4111293#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 4111285#L1214-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 4111202#L902-12 assume !(1 == ~currentHeading~0); 4111198#L912-36 assume !(0 == ~currentFloorID~0); 4109724#L912-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4108216#L918-25 assume { :end_inline_continueInDirection } true; 4107514#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4107515#L2702-134 assume !(0 == isFloorCalling_~floorID#1); 4107509#L2706-134 assume !(1 == isFloorCalling_~floorID#1); 4107510#L2710-134 assume !(2 == isFloorCalling_~floorID#1); 4107426#L2714-134 assume !(3 == isFloorCalling_~floorID#1); 4107428#L2718-134 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~27#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4107416#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4107417#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 4107374#L1697-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 4107368#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 4107367#timeShift_returnLabel#5 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 4107358#L2415-2 assume !false; 4031703#L2416 [2022-12-13 13:24:54,183 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:24:54,183 INFO L85 PathProgramCache]: Analyzing trace with hash 1962999837, now seen corresponding path program 1 times [2022-12-13 13:24:54,183 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:24:54,183 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2095015427] [2022-12-13 13:24:54,184 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:24:54,184 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:24:54,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:24:54,262 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:24:54,263 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:24:54,263 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2095015427] [2022-12-13 13:24:54,263 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2095015427] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:24:54,263 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:24:54,263 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 13:24:54,263 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1030244533] [2022-12-13 13:24:54,263 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:24:54,263 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 13:24:54,263 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:24:54,263 INFO L85 PathProgramCache]: Analyzing trace with hash -225847587, now seen corresponding path program 1 times [2022-12-13 13:24:54,263 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:24:54,264 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [98651858] [2022-12-13 13:24:54,264 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:24:54,264 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:24:54,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:24:54,295 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:24:54,295 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:24:54,295 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [98651858] [2022-12-13 13:24:54,295 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [98651858] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:24:54,295 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:24:54,295 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 13:24:54,295 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [860327189] [2022-12-13 13:24:54,295 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:24:54,295 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 13:24:54,296 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:24:54,296 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 13:24:54,296 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-13 13:24:54,296 INFO L87 Difference]: Start difference. First operand 172579 states and 307223 transitions. cyclomatic complexity: 134690 Second operand has 7 states, 7 states have (on average 7.714285714285714) internal successors, (54), 7 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:24:56,009 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:24:56,010 INFO L93 Difference]: Finished difference Result 365875 states and 650055 transitions. [2022-12-13 13:24:56,010 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 365875 states and 650055 transitions. [2022-12-13 13:24:57,348 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 106710 [2022-12-13 13:24:58,277 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 365875 states to 365875 states and 650055 transitions. [2022-12-13 13:24:58,277 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 274426 [2022-12-13 13:24:58,381 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 274426 [2022-12-13 13:24:58,381 INFO L73 IsDeterministic]: Start isDeterministic. Operand 365875 states and 650055 transitions. [2022-12-13 13:24:58,394 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 13:24:58,394 INFO L218 hiAutomatonCegarLoop]: Abstraction has 365875 states and 650055 transitions. [2022-12-13 13:24:58,542 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 365875 states and 650055 transitions. [2022-12-13 13:25:00,408 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 365875 to 172937. [2022-12-13 13:25:00,669 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 172937 states, 172937 states have (on average 1.7785725437587099) internal successors, (307581), 172936 states have internal predecessors, (307581), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:25:01,039 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172937 states to 172937 states and 307581 transitions. [2022-12-13 13:25:01,039 INFO L240 hiAutomatonCegarLoop]: Abstraction has 172937 states and 307581 transitions. [2022-12-13 13:25:01,040 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-12-13 13:25:01,040 INFO L428 stractBuchiCegarLoop]: Abstraction has 172937 states and 307581 transitions. [2022-12-13 13:25:01,040 INFO L335 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2022-12-13 13:25:01,040 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 172937 states and 307581 transitions. [2022-12-13 13:25:01,537 INFO L131 ngComponentsAnalysis]: Automaton has 30 accepting balls. 51430 [2022-12-13 13:25:01,537 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 13:25:01,537 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 13:25:01,539 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:25:01,539 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:25:01,540 INFO L748 eck$LassoCheckResult]: Stem: 4518407#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 4518408#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 4524754#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 4524319#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 4519902#valid_product_returnLabel#1 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 4519903#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 4522069#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 4518821#L2188 assume !(0 == getOrigin_~person#1); 4518822#L2192 assume !(1 == getOrigin_~person#1); 4520808#L2196 assume !(2 == getOrigin_~person#1); 4520809#L2200 assume !(3 == getOrigin_~person#1); 4522798#L2204 assume !(4 == getOrigin_~person#1); 4523892#L2208 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 4523794#getOrigin_returnLabel#1 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 4523795#L2973 assume 0 == initPersonOnFloor_~floor#1; 4522809#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 4518111#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 4521429#L2765 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 4523463#L2777-2 assume { :end_inline_callOnFloor } true; 4520683#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 4520684#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4525917#L2702 assume !(0 == isFloorCalling_~floorID#1); 4525918#L2706 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4525925#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4525926#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 4525921#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4525922#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 4517820#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 4517822#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 4525933#L1115 assume !(0 != timeShift_~tmp___9~2#1); 4525935#L1206 assume 1 == ~doorState~0;~doorState~0 := 0; 4525939#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4525940#L2702-3 assume !(0 == isFloorCalling_~floorID#1); 4526427#L2706-3 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4526043#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4526041#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 4526042#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4525976#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 4525977#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 4525967#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 4525969#L902 assume !(1 == ~currentHeading~0); 4526288#L912 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4526287#L912-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4526236#L918-1 assume { :end_inline_continueInDirection } true; 4526237#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4526222#L2702-25 assume !(0 == isFloorCalling_~floorID#1); 4526224#L2706-25 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4526207#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4526208#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 4526189#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 4526188#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 4526175#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4526176#L2702-26 assume !(0 == isFloorCalling_~floorID#1); 4527400#L2706-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4526155#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4526156#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 4526120#L962-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4526121#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 4539697#L966-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 4539694#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 4539692#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 4539691#L1206-3 assume !(1 == ~doorState~0); 4539689#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4539687#L2702-29 assume !(0 == isFloorCalling_~floorID#1); 4539685#L2706-29 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4539682#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4539677#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 4539535#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4539511#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 4539506#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 4539499#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 4539494#L902-3 assume !(1 == ~currentHeading~0); 4539491#L912-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4538538#L912-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4538539#L918-7 assume { :end_inline_continueInDirection } true; 4539371#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4539369#L2702-51 assume !(0 == isFloorCalling_~floorID#1); 4539368#L2706-51 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4539356#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4539355#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 4539330#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 4539320#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 4539309#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4539234#L2702-52 assume !(0 == isFloorCalling_~floorID#1); 4518646#L2706-52 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4517914#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4539328#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 4539314#L962-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4539239#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 4529036#L966-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 4529038#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 4538740#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 4538726#L1206-6 assume !(1 == ~doorState~0); 4538707#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4537503#L2702-55 assume !(0 == isFloorCalling_~floorID#1); 4535987#L2706-55 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4535983#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4535981#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 4535978#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4535724#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 4535722#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 4535718#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 4535681#L902-6 assume !(1 == ~currentHeading~0); 4535659#L912-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4535653#L912-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4535647#L918-13 assume { :end_inline_continueInDirection } true; 4535645#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4535641#L2702-77 assume !(0 == isFloorCalling_~floorID#1); 4535635#L2706-77 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4535629#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4535624#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 4535615#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 4535612#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 4535610#timeShift_returnLabel#3 assume { :end_inline_timeShift } true; 4535607#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 4535598#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 4535592#getOrigin_returnLabel#2 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 4535588#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 4535558#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 4535512#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 4535513#L2765-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 4535496#L2777-5 assume { :end_inline_callOnFloor } true; 4535497#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 4535490#bobCall_returnLabel#1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4535491#L2702-78 assume !(0 == isFloorCalling_~floorID#1); 4568952#L2706-78 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4573204#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4535450#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 4535451#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4565541#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 4565542#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 4573180#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 4580744#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 4580738#L1206-9 assume !(1 == ~doorState~0); 4580736#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4580733#L2702-81 assume !(0 == isFloorCalling_~floorID#1); 4580731#L2706-81 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4580727#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4580509#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 4580269#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4580176#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 4580099#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 4580096#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 4580040#L902-9 assume !(1 == ~currentHeading~0); 4580027#L912-27 assume !(0 == ~currentFloorID~0); 4580026#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4580019#L918-19 assume { :end_inline_continueInDirection } true; 4585574#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4585572#L2702-103 assume !(0 == isFloorCalling_~floorID#1); 4585569#L2706-103 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4585567#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4585566#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 4583687#L1697-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 4583685#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 4583683#timeShift_returnLabel#4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 4582694#L2415-2 assume !false; 4582695#L2416 [2022-12-13 13:25:01,540 INFO L750 eck$LassoCheckResult]: Loop: 4582695#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 4595928#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 4595925#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 4595924#L2423 assume 1 != cleanup_~tmp___0~11#1; 4595923#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4595921#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4595922#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 4595894#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 4595880#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 4595879#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 4595878#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4595875#L2702-109 assume !(0 == isFloorCalling_~floorID#1); 4595872#L2706-109 assume !(1 == isFloorCalling_~floorID#1); 4595870#L2710-109 assume !(2 == isFloorCalling_~floorID#1); 4595868#L2714-109 assume !(3 == isFloorCalling_~floorID#1); 4595865#L2718-109 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~27#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4595862#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4595860#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 4595858#L962-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4595854#L2702-111 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4595843#isFloorCalling_returnLabel#112 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 4595844#L935-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 4595836#L310-9 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 4595828#buttonForFloorIsPressed_returnLabel#10 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1; 4595826#L942-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 4595823#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#10 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 4595821#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 4595819#L1115-8 assume !(0 != timeShift_~tmp___9~2#1); 4595816#L1206-12 assume !(1 == ~doorState~0); 4595815#L1206-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4595809#L2702-112 assume !(0 == isFloorCalling_~floorID#1); 4595811#L2706-112 assume !(1 == isFloorCalling_~floorID#1); 4595805#L2710-112 assume !(2 == isFloorCalling_~floorID#1); 4595806#L2714-112 assume !(3 == isFloorCalling_~floorID#1); 4595733#L2718-112 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~27#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4595734#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4597949#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 4597950#L845-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4601219#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 4601822#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 4601820#L1214-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 4601821#L902-12 assume !(1 == ~currentHeading~0); 4606917#L912-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4606914#L912-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4595950#L918-25 assume { :end_inline_continueInDirection } true; 4595949#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4595947#L2702-134 assume !(0 == isFloorCalling_~floorID#1); 4595946#L2706-134 assume !(1 == isFloorCalling_~floorID#1); 4595945#L2710-134 assume !(2 == isFloorCalling_~floorID#1); 4595944#L2714-134 assume !(3 == isFloorCalling_~floorID#1); 4595942#L2718-134 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~27#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4595941#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4595939#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 4595935#L1697-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 4595933#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 4595932#timeShift_returnLabel#5 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 4595931#L2415-2 assume !false; 4582695#L2416 [2022-12-13 13:25:01,541 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:25:01,541 INFO L85 PathProgramCache]: Analyzing trace with hash 1962999837, now seen corresponding path program 2 times [2022-12-13 13:25:01,541 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:25:01,541 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [254580608] [2022-12-13 13:25:01,541 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:25:01,541 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:25:01,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:25:01,806 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:25:01,806 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:25:01,806 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [254580608] [2022-12-13 13:25:01,806 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [254580608] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:25:01,806 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:25:01,806 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 13:25:01,806 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [96077569] [2022-12-13 13:25:01,806 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:25:01,806 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 13:25:01,806 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:25:01,807 INFO L85 PathProgramCache]: Analyzing trace with hash -1499850221, now seen corresponding path program 1 times [2022-12-13 13:25:01,807 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:25:01,807 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1625043955] [2022-12-13 13:25:01,807 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:25:01,807 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:25:01,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:25:01,837 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:25:01,837 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:25:01,837 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1625043955] [2022-12-13 13:25:01,837 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1625043955] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:25:01,837 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:25:01,837 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 13:25:01,837 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [235822830] [2022-12-13 13:25:01,837 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:25:01,838 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 13:25:01,838 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:25:01,838 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 13:25:01,838 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-13 13:25:01,838 INFO L87 Difference]: Start difference. First operand 172937 states and 307581 transitions. cyclomatic complexity: 134690 Second operand has 7 states, 7 states have (on average 8.142857142857142) internal successors, (57), 7 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:25:08,108 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:25:08,108 INFO L93 Difference]: Finished difference Result 704956 states and 1250994 transitions. [2022-12-13 13:25:08,109 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 704956 states and 1250994 transitions. [2022-12-13 13:25:10,659 INFO L131 ngComponentsAnalysis]: Automaton has 37 accepting balls. 204075 [2022-12-13 13:25:12,634 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 704956 states to 704956 states and 1250994 transitions. [2022-12-13 13:25:12,634 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 489320 [2022-12-13 13:25:12,818 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 489320 [2022-12-13 13:25:12,818 INFO L73 IsDeterministic]: Start isDeterministic. Operand 704956 states and 1250994 transitions. [2022-12-13 13:25:12,818 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 13:25:12,818 INFO L218 hiAutomatonCegarLoop]: Abstraction has 704956 states and 1250994 transitions. [2022-12-13 13:25:13,134 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 704956 states and 1250994 transitions. [2022-12-13 13:25:16,332 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 704956 to 171278. [2022-12-13 13:25:16,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 171278 states, 171278 states have (on average 1.7796039187753243) internal successors, (304807), 171277 states have internal predecessors, (304807), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:25:16,715 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171278 states to 171278 states and 304807 transitions. [2022-12-13 13:25:16,715 INFO L240 hiAutomatonCegarLoop]: Abstraction has 171278 states and 304807 transitions. [2022-12-13 13:25:16,715 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-12-13 13:25:16,716 INFO L428 stractBuchiCegarLoop]: Abstraction has 171278 states and 304807 transitions. [2022-12-13 13:25:16,716 INFO L335 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2022-12-13 13:25:16,716 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 171278 states and 304807 transitions. [2022-12-13 13:25:17,247 INFO L131 ngComponentsAnalysis]: Automaton has 34 accepting balls. 50496 [2022-12-13 13:25:17,247 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 13:25:17,247 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 13:25:17,248 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:25:17,248 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:25:17,248 INFO L748 eck$LassoCheckResult]: Stem: 5396355#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 5396356#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 5402784#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5402342#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 5397864#valid_product_returnLabel#1 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 5397865#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 5400041#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 5396775#L2188 assume !(0 == getOrigin_~person#1); 5396776#L2192 assume !(1 == getOrigin_~person#1); 5398786#L2196 assume !(2 == getOrigin_~person#1); 5398787#L2200 assume !(3 == getOrigin_~person#1); 5400773#L2204 assume !(4 == getOrigin_~person#1); 5401890#L2208 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 5401790#getOrigin_returnLabel#1 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5401791#L2973 assume 0 == initPersonOnFloor_~floor#1; 5400785#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 5396056#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 5399402#L2765 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 5401449#L2777-2 assume { :end_inline_callOnFloor } true; 5402930#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 5397103#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5397104#L2702 assume !(0 == isFloorCalling_~floorID#1); 5402180#L2706 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5404008#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5404009#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 5403980#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 5403981#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 5395766#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 5395768#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 5404866#L1115 assume !(0 != timeShift_~tmp___9~2#1); 5404867#L1206 assume 1 == ~doorState~0;~doorState~0 := 0; 5397319#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5397320#L2702-3 assume !(0 == isFloorCalling_~floorID#1); 5397160#L2706-3 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5396708#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5398579#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 5398580#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 5404045#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 5404046#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 5404030#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 5404032#L902 assume !(1 == ~currentHeading~0); 5407781#L912 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5407758#L912-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5407757#L918-1 assume { :end_inline_continueInDirection } true; 5408005#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5407998#L2702-25 assume !(0 == isFloorCalling_~floorID#1); 5407999#L2706-25 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5407982#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5407983#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 5407971#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 5407238#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 5407239#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5407151#L2702-26 assume !(0 == isFloorCalling_~floorID#1); 5407152#L2706-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5407946#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5407947#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 5407937#L962-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 5407938#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 5407923#L966-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 5407925#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 5415227#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 5415228#L1206-3 assume !(1 == ~doorState~0); 5404156#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5404157#L2702-29 assume !(0 == isFloorCalling_~floorID#1); 5404151#L2706-29 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5404149#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5404134#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 5404135#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 5417958#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 5417959#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 5425401#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 5425402#L902-3 assume !(1 == ~currentHeading~0); 5417949#L912-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5417944#L912-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5426940#L918-7 assume { :end_inline_continueInDirection } true; 5425325#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5425326#L2702-51 assume !(0 == isFloorCalling_~floorID#1); 5425322#L2706-51 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5415556#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5415557#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 5415528#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 5415527#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 5414445#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5414446#L2702-52 assume !(0 == isFloorCalling_~floorID#1); 5396599#L2706-52 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5395859#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5419236#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 5419237#L962-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 5427213#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 5427196#L966-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 5427177#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 5425208#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 5425209#L1206-6 assume !(1 == ~doorState~0); 5427176#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5427174#L2702-55 assume !(0 == isFloorCalling_~floorID#1); 5427172#L2706-55 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5427169#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5427168#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 5427166#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 5427167#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 5427310#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 5427297#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 5427146#L902-6 assume !(1 == ~currentHeading~0); 5427132#L912-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5427126#L912-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5427118#L918-13 assume { :end_inline_continueInDirection } true; 5427119#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5414440#L2702-77 assume !(0 == isFloorCalling_~floorID#1); 5414442#L2706-77 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5446035#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5446034#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 5446029#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 5446027#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 5446026#timeShift_returnLabel#3 assume { :end_inline_timeShift } true; 5446025#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 5446021#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 5446017#getOrigin_returnLabel#2 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5446016#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 5445996#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 5445984#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 5421293#L2765-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 5421289#L2777-5 assume { :end_inline_callOnFloor } true; 5421132#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 5421133#bobCall_returnLabel#1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5420543#L2702-78 assume !(0 == isFloorCalling_~floorID#1); 5420544#L2706-78 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5421368#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5421369#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 5425186#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 5425188#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 5429947#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 5429948#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 5460338#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 5460339#L1206-9 assume !(1 == ~doorState~0); 5460605#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5461809#L2702-81 assume !(0 == isFloorCalling_~floorID#1); 5461808#L2706-81 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5461804#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5461803#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 5461801#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 5461802#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 5461836#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 5461737#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 5461724#L902-9 assume !(1 == ~currentHeading~0); 5461661#L912-27 assume !(0 == ~currentFloorID~0); 5461659#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5461653#L918-19 assume { :end_inline_continueInDirection } true; 5464775#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5464773#L2702-103 assume !(0 == isFloorCalling_~floorID#1); 5464770#L2706-103 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5464768#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5464766#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 5464761#L1697-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 5464760#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 5464759#timeShift_returnLabel#4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 5464755#L2415-2 assume !false; 5464756#L2416 [2022-12-13 13:25:17,249 INFO L750 eck$LassoCheckResult]: Loop: 5464756#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 5487832#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 5487831#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 5487830#L2423 assume 1 != cleanup_~tmp___0~11#1; 5487813#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5487808#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5487806#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 5487800#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 5487786#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 5487785#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 5487784#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5487782#L2702-109 assume !(0 == isFloorCalling_~floorID#1); 5487781#L2706-109 assume !(1 == isFloorCalling_~floorID#1); 5487780#L2710-109 assume !(2 == isFloorCalling_~floorID#1); 5487779#L2714-109 assume !(3 == isFloorCalling_~floorID#1); 5487777#L2718-109 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~27#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5487776#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5487775#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 5487774#L962-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5487773#L2702-111 assume !(0 == isFloorCalling_~floorID#1); 5487771#L2706-111 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5487767#isFloorCalling_returnLabel#112 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 5487765#L935-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 5487762#L310-9 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 5487759#buttonForFloorIsPressed_returnLabel#10 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1; 5487757#L942-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 5487758#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#10 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 5494153#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 5494152#L1115-8 assume !(0 != timeShift_~tmp___9~2#1); 5494151#L1206-12 assume !(1 == ~doorState~0); 5485624#L1206-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5494149#L2702-112 assume !(0 == isFloorCalling_~floorID#1); 5494148#L2706-112 assume !(1 == isFloorCalling_~floorID#1); 5494147#L2710-112 assume !(2 == isFloorCalling_~floorID#1); 5494146#L2714-112 assume !(3 == isFloorCalling_~floorID#1); 5494144#L2718-112 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~27#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5494143#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5494142#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 5494140#L845-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 5494141#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 5494535#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 5494492#L1214-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 5494493#L902-12 assume !(1 == ~currentHeading~0); 5499625#L912-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5499623#L912-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5487975#L918-25 assume { :end_inline_continueInDirection } true; 5487851#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5487849#L2702-134 assume !(0 == isFloorCalling_~floorID#1); 5487848#L2706-134 assume !(1 == isFloorCalling_~floorID#1); 5487847#L2710-134 assume !(2 == isFloorCalling_~floorID#1); 5487846#L2714-134 assume !(3 == isFloorCalling_~floorID#1); 5487844#L2718-134 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~27#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5487843#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5487841#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 5487837#L1697-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 5487835#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 5487834#timeShift_returnLabel#5 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 5487833#L2415-2 assume !false; 5464756#L2416 [2022-12-13 13:25:17,249 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:25:17,249 INFO L85 PathProgramCache]: Analyzing trace with hash 1962999837, now seen corresponding path program 3 times [2022-12-13 13:25:17,249 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:25:17,249 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [244391317] [2022-12-13 13:25:17,249 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:25:17,250 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:25:17,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:25:17,327 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:25:17,327 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:25:17,327 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [244391317] [2022-12-13 13:25:17,327 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [244391317] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:25:17,327 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:25:17,328 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 13:25:17,328 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1170208241] [2022-12-13 13:25:17,328 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:25:17,328 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 13:25:17,328 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:25:17,328 INFO L85 PathProgramCache]: Analyzing trace with hash 2023512501, now seen corresponding path program 1 times [2022-12-13 13:25:17,328 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:25:17,329 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2096920016] [2022-12-13 13:25:17,329 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:25:17,329 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:25:17,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:25:17,367 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:25:17,367 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:25:17,367 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2096920016] [2022-12-13 13:25:17,367 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2096920016] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:25:17,367 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:25:17,367 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 13:25:17,368 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1808041354] [2022-12-13 13:25:17,368 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:25:17,368 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 13:25:17,368 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:25:17,368 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 13:25:17,368 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-13 13:25:17,368 INFO L87 Difference]: Start difference. First operand 171278 states and 304807 transitions. cyclomatic complexity: 133582 Second operand has 7 states, 7 states have (on average 8.285714285714286) internal successors, (58), 7 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:25:25,054 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:25:25,055 INFO L93 Difference]: Finished difference Result 682489 states and 1212499 transitions. [2022-12-13 13:25:25,055 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 682489 states and 1212499 transitions. [2022-12-13 13:25:27,570 INFO L131 ngComponentsAnalysis]: Automaton has 86 accepting balls. 198887 [2022-12-13 13:25:29,341 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 682489 states to 681169 states and 1210791 transitions. [2022-12-13 13:25:29,341 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 514573 [2022-12-13 13:25:29,582 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 514573 [2022-12-13 13:25:29,582 INFO L73 IsDeterministic]: Start isDeterministic. Operand 681169 states and 1210791 transitions. [2022-12-13 13:25:29,641 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 13:25:29,641 INFO L218 hiAutomatonCegarLoop]: Abstraction has 681169 states and 1210791 transitions. [2022-12-13 13:25:29,962 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 681169 states and 1210791 transitions. [2022-12-13 13:25:33,476 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 681169 to 244869. [2022-12-13 13:25:33,630 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 244869 states, 244869 states have (on average 1.7730500798386075) internal successors, (434165), 244868 states have internal predecessors, (434165), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:25:34,263 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 244869 states to 244869 states and 434165 transitions. [2022-12-13 13:25:34,263 INFO L240 hiAutomatonCegarLoop]: Abstraction has 244869 states and 434165 transitions. [2022-12-13 13:25:34,264 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-12-13 13:25:34,264 INFO L428 stractBuchiCegarLoop]: Abstraction has 244869 states and 434165 transitions. [2022-12-13 13:25:34,264 INFO L335 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2022-12-13 13:25:34,264 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 244869 states and 434165 transitions. [2022-12-13 13:25:34,752 INFO L131 ngComponentsAnalysis]: Automaton has 48 accepting balls. 74589 [2022-12-13 13:25:34,752 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 13:25:34,753 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 13:25:34,754 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:25:34,754 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:25:34,754 INFO L748 eck$LassoCheckResult]: Stem: 6250169#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 6250170#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 6256618#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6256168#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 6251664#valid_product_returnLabel#1 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 6251665#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 6253845#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 6250584#L2188 assume !(0 == getOrigin_~person#1); 6250585#L2192 assume !(1 == getOrigin_~person#1); 6252576#L2196 assume !(2 == getOrigin_~person#1); 6252577#L2200 assume !(3 == getOrigin_~person#1); 6254583#L2204 assume !(4 == getOrigin_~person#1); 6255729#L2208 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 6255628#getOrigin_returnLabel#1 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6255629#L2973 assume 0 == initPersonOnFloor_~floor#1; 6254596#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 6249869#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 6253194#L2765 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 6255273#L2777-2 assume { :end_inline_callOnFloor } true; 6256770#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 6250915#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6250916#L2702 assume !(0 == isFloorCalling_~floorID#1); 6255577#L2706 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6251746#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 6257833#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 6257822#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 6257823#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 6249582#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 6249584#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 6258991#L1115 assume !(0 != timeShift_~tmp___9~2#1); 6258992#L1206 assume 1 == ~doorState~0;~doorState~0 := 0; 6259821#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6259822#L2702-3 assume !(0 == isFloorCalling_~floorID#1); 6259809#L2706-3 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6259780#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 6259755#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 6259756#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 6259729#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 6259730#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 6257861#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 6257863#L902 assume !(1 == ~currentHeading~0); 6260824#L912 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6260823#L912-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6260157#L918-1 assume { :end_inline_continueInDirection } true; 6260158#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6269186#L2702-25 assume !(0 == isFloorCalling_~floorID#1); 6269188#L2706-25 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6276378#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 6276376#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 6276372#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 6276371#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 6276370#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6276368#L2702-26 assume !(0 == isFloorCalling_~floorID#1); 6276366#L2706-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6276362#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 6276361#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 6276359#L962-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 6276360#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 6276354#L966-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 6267918#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 6267919#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 6276281#L1206-3 assume !(1 == ~doorState~0); 6276270#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6276264#L2702-29 assume !(0 == isFloorCalling_~floorID#1); 6276266#L2706-29 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6285113#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 6285112#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 6276238#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 6276239#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 6278442#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 6278443#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 6277601#L902-3 assume !(1 == ~currentHeading~0); 6277602#L912-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6277577#L912-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6277576#L918-7 assume { :end_inline_continueInDirection } true; 6285070#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6276228#L2702-51 assume !(0 == isFloorCalling_~floorID#1); 6276230#L2706-51 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6276220#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 6276221#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 6276210#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 6276209#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 6276204#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6276205#L2702-52 assume !(0 == isFloorCalling_~floorID#1); 6276199#L2706-52 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6276196#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 6276189#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 6276190#L962-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 6276181#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 6276182#L966-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 6285020#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 6285021#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 6288474#L1206-6 assume !(1 == ~doorState~0); 6288473#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6288467#L2702-55 assume !(0 == isFloorCalling_~floorID#1); 6288469#L2706-55 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6288460#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 6288461#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 6288441#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 6288443#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 6293940#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 6293941#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 6295326#L902-6 assume !(1 == ~currentHeading~0); 6295324#L912-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6295314#L912-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6295315#L918-13 assume { :end_inline_continueInDirection } true; 6292925#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6292923#L2702-77 assume !(0 == isFloorCalling_~floorID#1); 6292922#L2706-77 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6292918#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 6292917#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 6292912#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 6292910#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 6292909#timeShift_returnLabel#3 assume { :end_inline_timeShift } true; 6292908#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 6292905#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 6292901#getOrigin_returnLabel#2 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6292900#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 6292880#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 6292867#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 6292608#L2765-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 6261071#L2777-5 assume { :end_inline_callOnFloor } true; 6292600#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 6292601#bobCall_returnLabel#1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6291706#L2702-78 assume !(0 == isFloorCalling_~floorID#1); 6291708#L2706-78 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6293248#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 6293249#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 6293243#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 6293245#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 6293235#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 6293236#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 6320547#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 6320544#L1206-9 assume !(1 == ~doorState~0); 6320543#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6320533#L2702-81 assume !(0 == isFloorCalling_~floorID#1); 6320535#L2706-81 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6342784#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 6342783#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 6342781#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 6342780#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 6342779#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 6342778#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 6328063#L902-9 assume !(1 == ~currentHeading~0); 6328064#L912-27 assume !(0 == ~currentFloorID~0); 6328066#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6342697#L918-19 assume { :end_inline_continueInDirection } true; 6349925#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6349923#L2702-103 assume !(0 == isFloorCalling_~floorID#1); 6349920#L2706-103 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6349918#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 6349916#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 6349911#L1697-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 6349910#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 6349909#timeShift_returnLabel#4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 6349907#L2415-2 assume !false; 6349908#L2416 [2022-12-13 13:25:34,754 INFO L750 eck$LassoCheckResult]: Loop: 6349908#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 6412677#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 6412274#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 6412273#L2423 assume 1 != cleanup_~tmp___0~11#1; 6412272#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6412270#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6412271#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 6412354#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 6412225#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 6412226#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 6412221#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6412222#L2702-109 assume !(0 == isFloorCalling_~floorID#1); 6412029#L2706-109 assume !(1 == isFloorCalling_~floorID#1); 6412030#L2710-109 assume !(2 == isFloorCalling_~floorID#1); 6412025#L2714-109 assume !(3 == isFloorCalling_~floorID#1); 6412026#L2718-109 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~27#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6413279#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 6413278#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 6413277#L962-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6413275#L2702-111 assume !(0 == isFloorCalling_~floorID#1); 6413273#L2706-111 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6413271#isFloorCalling_returnLabel#112 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 6418246#L935-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 6413169#L310-9 assume !(0 == buttonForFloorIsPressed_~floorID#1); 6413166#L314-9 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 6413159#buttonForFloorIsPressed_returnLabel#10 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1; 6413157#L942-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 6413154#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#10 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 6413152#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 6413150#L1115-8 assume !(0 != timeShift_~tmp___9~2#1); 6413147#L1206-12 assume !(1 == ~doorState~0); 6413144#L1206-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6413142#L2702-112 assume !(0 == isFloorCalling_~floorID#1); 6413141#L2706-112 assume !(1 == isFloorCalling_~floorID#1); 6413140#L2710-112 assume !(2 == isFloorCalling_~floorID#1); 6413139#L2714-112 assume !(3 == isFloorCalling_~floorID#1); 6413137#L2718-112 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~27#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6413136#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 6413135#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 6413133#L845-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 6413132#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 6413124#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 6413078#L1214-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 6413073#L902-12 assume !(1 == ~currentHeading~0); 6412755#L912-36 assume !(0 == ~currentFloorID~0); 6412746#L912-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6412742#L918-25 assume { :end_inline_continueInDirection } true; 6412741#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 6412739#L2702-134 assume !(0 == isFloorCalling_~floorID#1); 6412738#L2706-134 assume !(1 == isFloorCalling_~floorID#1); 6412734#L2710-134 assume !(2 == isFloorCalling_~floorID#1); 6412736#L2714-134 assume !(3 == isFloorCalling_~floorID#1); 6412737#L2718-134 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~27#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 6412732#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 6412733#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 6412725#L1697-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 6412723#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 6412722#timeShift_returnLabel#5 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 6412721#L2415-2 assume !false; 6349908#L2416 [2022-12-13 13:25:34,755 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:25:34,755 INFO L85 PathProgramCache]: Analyzing trace with hash 1962999837, now seen corresponding path program 4 times [2022-12-13 13:25:34,755 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:25:34,755 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [11477426] [2022-12-13 13:25:34,755 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:25:34,755 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:25:34,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:25:34,843 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:25:34,843 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:25:34,843 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [11477426] [2022-12-13 13:25:34,843 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [11477426] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:25:34,843 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:25:34,844 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 13:25:34,844 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1517860984] [2022-12-13 13:25:34,844 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:25:34,844 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 13:25:34,844 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:25:34,844 INFO L85 PathProgramCache]: Analyzing trace with hash -344486331, now seen corresponding path program 1 times [2022-12-13 13:25:34,844 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:25:34,844 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1642163566] [2022-12-13 13:25:34,844 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:25:34,844 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:25:34,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:25:34,869 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:25:34,869 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:25:34,869 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1642163566] [2022-12-13 13:25:34,869 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1642163566] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:25:34,869 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:25:34,869 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 13:25:34,869 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [768791630] [2022-12-13 13:25:34,869 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:25:34,869 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 13:25:34,869 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:25:34,869 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 13:25:34,869 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 13:25:34,870 INFO L87 Difference]: Start difference. First operand 244869 states and 434165 transitions. cyclomatic complexity: 189372 Second operand has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:25:39,639 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:25:39,639 INFO L93 Difference]: Finished difference Result 758765 states and 1340147 transitions. [2022-12-13 13:25:39,639 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 758765 states and 1340147 transitions. [2022-12-13 13:25:42,308 INFO L131 ngComponentsAnalysis]: Automaton has 82 accepting balls. 242120 [2022-12-13 13:25:44,249 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 758765 states to 758765 states and 1340147 transitions. [2022-12-13 13:25:44,249 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 576603 [2022-12-13 13:25:44,517 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 576603 [2022-12-13 13:25:44,517 INFO L73 IsDeterministic]: Start isDeterministic. Operand 758765 states and 1340147 transitions. [2022-12-13 13:25:44,587 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 13:25:44,587 INFO L218 hiAutomatonCegarLoop]: Abstraction has 758765 states and 1340147 transitions. [2022-12-13 13:25:44,962 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 758765 states and 1340147 transitions. [2022-12-13 13:25:48,368 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 758765 to 245805. [2022-12-13 13:25:48,511 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 245805 states, 245805 states have (on average 1.7697646508411138) internal successors, (435017), 245804 states have internal predecessors, (435017), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:25:48,900 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 245805 states to 245805 states and 435017 transitions. [2022-12-13 13:25:48,900 INFO L240 hiAutomatonCegarLoop]: Abstraction has 245805 states and 435017 transitions. [2022-12-13 13:25:48,901 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-13 13:25:48,901 INFO L428 stractBuchiCegarLoop]: Abstraction has 245805 states and 435017 transitions. [2022-12-13 13:25:48,901 INFO L335 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2022-12-13 13:25:48,901 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 245805 states and 435017 transitions. [2022-12-13 13:25:49,736 INFO L131 ngComponentsAnalysis]: Automaton has 48 accepting balls. 74779 [2022-12-13 13:25:49,736 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 13:25:49,737 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 13:25:49,738 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:25:49,738 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:25:49,738 INFO L748 eck$LassoCheckResult]: Stem: 7253828#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 7253829#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 7260055#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 7259635#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 7255315#valid_product_returnLabel#1 main_#t~ret130#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 7255316#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 7257457#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 7254244#L2188 assume !(0 == getOrigin_~person#1); 7254245#L2192 assume !(1 == getOrigin_~person#1); 7256200#L2196 assume !(2 == getOrigin_~person#1); 7256201#L2200 assume !(3 == getOrigin_~person#1); 7258158#L2204 assume !(4 == getOrigin_~person#1); 7259227#L2208 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 7259136#getOrigin_returnLabel#1 bigMacCall_#t~ret123#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 7259137#L2973 assume 0 == initPersonOnFloor_~floor#1; 7258171#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 7253528#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 7256809#L2765 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 7258816#L2777-2 assume { :end_inline_callOnFloor } true; 7256074#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 7256075#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 7261056#L2702 assume !(0 == isFloorCalling_~floorID#1); 7259091#L2706 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 7255396#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 7261059#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 7261060#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 7260204#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 7260205#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 7261073#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 7263559#L1115 assume !(0 != timeShift_~tmp___9~2#1); 7263560#L1206 assume 1 == ~doorState~0;~doorState~0 := 0; 7267541#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 7267542#L2702-3 assume !(0 == isFloorCalling_~floorID#1); 7273481#L2706-3 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 7267737#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 7267738#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 7267732#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 7267733#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 7273909#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 7261515#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 7261517#L902 assume !(1 == ~currentHeading~0); 7268191#L912 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 7274630#L912-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7273283#L918-1 assume { :end_inline_continueInDirection } true; 7273275#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 7273273#L2702-25 assume !(0 == isFloorCalling_~floorID#1); 7273272#L2706-25 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 7273263#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 7273255#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 7273232#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 7273214#L1697-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 7273172#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 7273169#L2702-26 assume !(0 == isFloorCalling_~floorID#1); 7273165#L2706-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 7273156#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 7273154#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 7273151#L962-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 7273148#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 7273145#L966-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 7273142#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 7273140#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 7273137#L1206-3 assume !(1 == ~doorState~0); 7273136#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 7272972#L2702-29 assume !(0 == isFloorCalling_~floorID#1); 7272974#L2706-29 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 7274214#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 7274209#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 7274210#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 7300084#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 7275708#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 7275706#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 7275707#L902-3 assume !(1 == ~currentHeading~0); 7278356#L912-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 7278342#L912-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7278341#L918-7 assume { :end_inline_continueInDirection } true; 7299572#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 7272829#L2702-51 assume !(0 == isFloorCalling_~floorID#1); 7272830#L2706-51 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 7299779#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 7299776#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 7299559#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 7299552#L1697-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 7299550#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 7299548#L2702-52 assume !(0 == isFloorCalling_~floorID#1); 7299544#L2706-52 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 7299535#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 7299533#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 7299530#L962-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 7299527#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 7299524#L966-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 7299521#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 7299519#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 7299516#L1206-6 assume !(1 == ~doorState~0); 7299515#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 7299509#L2702-55 assume !(0 == isFloorCalling_~floorID#1); 7299511#L2706-55 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 7302346#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 7302339#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 7302340#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 7312570#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 7304250#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 7304251#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 7312738#L902-6 assume !(1 == ~currentHeading~0); 7314212#L912-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 7314211#L912-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 7314540#L918-13 assume { :end_inline_continueInDirection } true; 7310958#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 7310959#L2702-77 assume !(0 == isFloorCalling_~floorID#1); 7313302#L2706-77 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 7313298#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 7313297#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 7313292#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 7313290#L1697-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 7313289#timeShift_returnLabel#3 assume { :end_inline_timeShift } true; 7313288#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 7313285#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 7313281#getOrigin_returnLabel#2 bobCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 7313279#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 7313280#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 7313177#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 7313178#L2765-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 7313164#L2777-5 assume { :end_inline_callOnFloor } true; 7313165#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 7310814#bobCall_returnLabel#1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 7310815#L2702-78 assume !(0 == isFloorCalling_~floorID#1); 7344149#L2706-78 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 7344142#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 7344143#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 7344135#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 7344137#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 7344126#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 7344127#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 7370381#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 7370380#L1206-9 assume !(1 == ~doorState~0); 7360917#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 7370377#L2702-81 assume !(0 == isFloorCalling_~floorID#1); 7370376#L2706-81 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 7370371#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 7370369#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 7370366#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 7370367#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 7370334#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 7370320#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 7370307#L902-9 assume !(1 == ~currentHeading~0); 7370266#L912-27 assume !(0 == ~currentFloorID~0); 7368061#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7368053#L918-19 assume { :end_inline_continueInDirection } true; 7370264#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 7279843#L2702-103 assume !(0 == isFloorCalling_~floorID#1); 7279844#L2706-103 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 7370259#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 7370257#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 7370252#L1697-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 7370251#L1697-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 7370249#timeShift_returnLabel#4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 7370246#L2415-2 assume !false; 7370247#L2416 [2022-12-13 13:25:49,738 INFO L750 eck$LassoCheckResult]: Loop: 7370247#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 7445582#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 7445573#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 7445571#L2423 assume 1 != cleanup_~tmp___0~11#1; 7445569#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 7445564#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 7445565#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 7444154#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 7430309#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 7430302#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 7415155#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 7415156#L2702-109 assume !(0 == isFloorCalling_~floorID#1); 7414603#L2706-109 assume !(1 == isFloorCalling_~floorID#1); 7414604#L2710-109 assume !(2 == isFloorCalling_~floorID#1); 7414599#L2714-109 assume !(3 == isFloorCalling_~floorID#1); 7414600#L2718-109 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~27#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 7426679#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 7426678#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 7426677#L962-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 7426675#L2702-111 assume !(0 == isFloorCalling_~floorID#1); 7426673#L2706-111 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 7426671#isFloorCalling_returnLabel#112 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret27#1; 7431449#L935-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 7426638#L310-9 assume !(0 == buttonForFloorIsPressed_~floorID#1); 7426601#L314-9 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 7426597#buttonForFloorIsPressed_returnLabel#10 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret28#1; 7426594#L942-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7#1);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11#1; 7426592#stopRequestedAtCurrentFloor__wrappee__weight_returnLabel#10 stopRequestedAtCurrentFloor_#t~ret32#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 7426590#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 7426587#L1115-8 assume !(0 != timeShift_~tmp___9~2#1); 7426586#L1206-12 assume !(1 == ~doorState~0); 7426584#L1206-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 7421280#L2702-112 assume !(0 == isFloorCalling_~floorID#1); 7421281#L2706-112 assume !(1 == isFloorCalling_~floorID#1); 7426542#L2710-112 assume !(2 == isFloorCalling_~floorID#1); 7426543#L2714-112 assume !(3 == isFloorCalling_~floorID#1); 7426538#L2718-112 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~27#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 7426539#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 7426996#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 7426995#L845-8 assume !(0 != stopRequestedInDirection_~tmp___0~2#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1, stopRequestedInDirection__wrappee__weight_#t~ret13#1, stopRequestedInDirection__wrappee__weight_#t~ret14#1, stopRequestedInDirection__wrappee__weight_#t~ret15#1, stopRequestedInDirection__wrappee__weight_#t~ret16#1, stopRequestedInDirection__wrappee__weight_#t~ret17#1, stopRequestedInDirection__wrappee__weight_#t~ret18#1, stopRequestedInDirection__wrappee__weight_#t~ret19#1, stopRequestedInDirection__wrappee__weight_#t~ret20#1, stopRequestedInDirection__wrappee__weight_#t~ret21#1, stopRequestedInDirection__wrappee__weight_#t~ret22#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~4#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 7426993#L497-8 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~29#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~29#1;isTopFloor_~retValue_acc~29#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~29#1; 7426992#isTopFloor_returnLabel#21 stopRequestedInDirection__wrappee__weight_#t~ret12#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~4#1 := stopRequestedInDirection__wrappee__weight_#t~ret12#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret12#1; 7426971#L501-8 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~4#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; 7415972#stopRequestedInDirection__wrappee__weight_returnLabel#9 stopRequestedInDirection_#t~ret25#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~9#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 7426952#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 7426950#L1214-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 7426951#L902-12 assume !(1 == ~currentHeading~0); 7427341#L912-36 assume !(0 == ~currentFloorID~0); 7427325#L912-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7427321#L918-25 assume { :end_inline_continueInDirection } true; 7421521#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 7421522#L2702-134 assume !(0 == isFloorCalling_~floorID#1); 7426795#L2706-134 assume !(1 == isFloorCalling_~floorID#1); 7426791#L2710-134 assume !(2 == isFloorCalling_~floorID#1); 7426792#L2714-134 assume !(3 == isFloorCalling_~floorID#1); 7426793#L2718-134 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~27#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 7426794#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 7445596#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 7445592#L1697-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 7445590#L1697-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 7445589#timeShift_returnLabel#5 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 7445588#L2415-2 assume !false; 7370247#L2416 [2022-12-13 13:25:49,739 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:25:49,739 INFO L85 PathProgramCache]: Analyzing trace with hash 1962999837, now seen corresponding path program 5 times [2022-12-13 13:25:49,739 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:25:49,739 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [145684010] [2022-12-13 13:25:49,739 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:25:49,739 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:25:49,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:25:49,823 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:25:49,824 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:25:49,824 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [145684010] [2022-12-13 13:25:49,824 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [145684010] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:25:49,824 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:25:49,824 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 13:25:49,824 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1517795733] [2022-12-13 13:25:49,824 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:25:49,825 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 13:25:49,825 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:25:49,825 INFO L85 PathProgramCache]: Analyzing trace with hash -2062900251, now seen corresponding path program 1 times [2022-12-13 13:25:49,825 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:25:49,825 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [137095841] [2022-12-13 13:25:49,825 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:25:49,825 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:25:49,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:25:49,851 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:25:49,852 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:25:49,852 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [137095841] [2022-12-13 13:25:49,852 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [137095841] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:25:49,852 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:25:49,852 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 13:25:49,852 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2017847341] [2022-12-13 13:25:49,852 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:25:49,852 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 13:25:49,852 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:25:49,853 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 13:25:49,853 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 13:25:49,853 INFO L87 Difference]: Start difference. First operand 245805 states and 435017 transitions. cyclomatic complexity: 189288 Second operand has 5 states, 5 states have (on average 12.4) internal successors, (62), 5 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:25:52,317 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:25:52,317 INFO L93 Difference]: Finished difference Result 569803 states and 998655 transitions. [2022-12-13 13:25:52,317 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 569803 states and 998655 transitions. [2022-12-13 13:25:54,487 INFO L131 ngComponentsAnalysis]: Automaton has 112 accepting balls. 191903