./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec14_product19.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 9bd2c7ff Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_35dad62f-4316-44d1-a0fc-e6cb078346d4/bin/uautomizer-verify-uCwYo4JHxu/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_35dad62f-4316-44d1-a0fc-e6cb078346d4/bin/uautomizer-verify-uCwYo4JHxu/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_35dad62f-4316-44d1-a0fc-e6cb078346d4/bin/uautomizer-verify-uCwYo4JHxu/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_35dad62f-4316-44d1-a0fc-e6cb078346d4/bin/uautomizer-verify-uCwYo4JHxu/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec14_product19.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_35dad62f-4316-44d1-a0fc-e6cb078346d4/bin/uautomizer-verify-uCwYo4JHxu/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_35dad62f-4316-44d1-a0fc-e6cb078346d4/bin/uautomizer-verify-uCwYo4JHxu --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 5643166a994eeb2bd259cf18f0a4b43a93b8e6b433c116ad537f0a1a02a75ec3 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-9bd2c7f [2023-11-19 08:03:33,035 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-19 08:03:33,183 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_35dad62f-4316-44d1-a0fc-e6cb078346d4/bin/uautomizer-verify-uCwYo4JHxu/config/svcomp-Termination-32bit-Automizer_Default.epf [2023-11-19 08:03:33,195 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-19 08:03:33,196 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-19 08:03:33,240 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-19 08:03:33,241 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-19 08:03:33,241 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-19 08:03:33,243 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-19 08:03:33,249 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-19 08:03:33,250 INFO L153 SettingsManager]: * Use SBE=true [2023-11-19 08:03:33,251 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2023-11-19 08:03:33,251 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2023-11-19 08:03:33,254 INFO L153 SettingsManager]: * Use old map elimination=false [2023-11-19 08:03:33,254 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2023-11-19 08:03:33,255 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2023-11-19 08:03:33,255 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2023-11-19 08:03:33,256 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-19 08:03:33,256 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2023-11-19 08:03:33,257 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-19 08:03:33,257 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-19 08:03:33,258 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-19 08:03:33,259 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-19 08:03:33,259 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2023-11-19 08:03:33,260 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2023-11-19 08:03:33,260 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2023-11-19 08:03:33,261 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2023-11-19 08:03:33,261 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-19 08:03:33,262 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-19 08:03:33,262 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2023-11-19 08:03:33,264 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-19 08:03:33,264 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-19 08:03:33,265 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-19 08:03:33,265 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-19 08:03:33,265 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-19 08:03:33,266 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2023-11-19 08:03:33,267 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_35dad62f-4316-44d1-a0fc-e6cb078346d4/bin/uautomizer-verify-uCwYo4JHxu/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_35dad62f-4316-44d1-a0fc-e6cb078346d4/bin/uautomizer-verify-uCwYo4JHxu Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 5643166a994eeb2bd259cf18f0a4b43a93b8e6b433c116ad537f0a1a02a75ec3 [2023-11-19 08:03:33,586 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-19 08:03:33,622 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-19 08:03:33,625 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-19 08:03:33,627 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-19 08:03:33,627 INFO L274 PluginConnector]: CDTParser initialized [2023-11-19 08:03:33,629 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_35dad62f-4316-44d1-a0fc-e6cb078346d4/bin/uautomizer-verify-uCwYo4JHxu/../../sv-benchmarks/c/product-lines/elevator_spec14_product19.cil.c [2023-11-19 08:03:37,398 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-19 08:03:37,888 INFO L384 CDTParser]: Found 1 translation units. [2023-11-19 08:03:37,895 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_35dad62f-4316-44d1-a0fc-e6cb078346d4/sv-benchmarks/c/product-lines/elevator_spec14_product19.cil.c [2023-11-19 08:03:37,921 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_35dad62f-4316-44d1-a0fc-e6cb078346d4/bin/uautomizer-verify-uCwYo4JHxu/data/a9710236a/fcd8c52b37994b938706c72520317ccf/FLAGb60225bb2 [2023-11-19 08:03:37,942 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_35dad62f-4316-44d1-a0fc-e6cb078346d4/bin/uautomizer-verify-uCwYo4JHxu/data/a9710236a/fcd8c52b37994b938706c72520317ccf [2023-11-19 08:03:37,946 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-19 08:03:37,948 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-19 08:03:37,949 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-19 08:03:37,950 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-19 08:03:37,957 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-19 08:03:37,958 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 08:03:37" (1/1) ... [2023-11-19 08:03:37,960 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@64d4c504 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:03:37, skipping insertion in model container [2023-11-19 08:03:37,961 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 08:03:37" (1/1) ... [2023-11-19 08:03:38,055 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-19 08:03:38,809 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-19 08:03:38,834 INFO L202 MainTranslator]: Completed pre-run [2023-11-19 08:03:38,855 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [48] [2023-11-19 08:03:38,857 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [1591] [2023-11-19 08:03:38,857 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification14_spec.i","") [1685] [2023-11-19 08:03:38,857 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [1722] [2023-11-19 08:03:38,857 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [1740] [2023-11-19 08:03:38,858 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [2106] [2023-11-19 08:03:38,859 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [2144] [2023-11-19 08:03:38,859 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [2262] [2023-11-19 08:03:38,860 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [2271] [2023-11-19 08:03:38,861 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [2619] [2023-11-19 08:03:38,976 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-19 08:03:39,010 INFO L206 MainTranslator]: Completed translation [2023-11-19 08:03:39,011 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:03:39 WrapperNode [2023-11-19 08:03:39,011 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-19 08:03:39,013 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-19 08:03:39,013 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-19 08:03:39,013 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-19 08:03:39,022 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:03:39" (1/1) ... [2023-11-19 08:03:39,097 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:03:39" (1/1) ... [2023-11-19 08:03:39,570 INFO L138 Inliner]: procedures = 91, calls = 334, calls flagged for inlining = 187, calls inlined = 696, statements flattened = 21276 [2023-11-19 08:03:39,571 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-19 08:03:39,571 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-19 08:03:39,572 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-19 08:03:39,572 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-19 08:03:39,584 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:03:39" (1/1) ... [2023-11-19 08:03:39,584 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:03:39" (1/1) ... [2023-11-19 08:03:39,658 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:03:39" (1/1) ... [2023-11-19 08:03:39,659 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:03:39" (1/1) ... [2023-11-19 08:03:39,928 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:03:39" (1/1) ... [2023-11-19 08:03:40,060 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:03:39" (1/1) ... [2023-11-19 08:03:40,082 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:03:39" (1/1) ... [2023-11-19 08:03:40,113 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:03:39" (1/1) ... [2023-11-19 08:03:40,184 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-19 08:03:40,185 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-19 08:03:40,185 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-19 08:03:40,186 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-19 08:03:40,187 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:03:39" (1/1) ... [2023-11-19 08:03:40,194 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-19 08:03:40,208 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_35dad62f-4316-44d1-a0fc-e6cb078346d4/bin/uautomizer-verify-uCwYo4JHxu/z3 [2023-11-19 08:03:40,224 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_35dad62f-4316-44d1-a0fc-e6cb078346d4/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-19 08:03:40,312 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_35dad62f-4316-44d1-a0fc-e6cb078346d4/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2023-11-19 08:03:40,356 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-19 08:03:40,356 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-19 08:03:40,356 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-19 08:03:40,356 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-19 08:03:40,552 INFO L236 CfgBuilder]: Building ICFG [2023-11-19 08:03:40,554 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-19 08:03:50,863 INFO L277 CfgBuilder]: Performing block encoding [2023-11-19 08:03:50,943 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-19 08:03:50,945 INFO L302 CfgBuilder]: Removed 1 assume(true) statements. [2023-11-19 08:03:50,978 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 08:03:50 BoogieIcfgContainer [2023-11-19 08:03:50,978 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-19 08:03:50,980 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2023-11-19 08:03:50,981 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2023-11-19 08:03:50,985 INFO L274 PluginConnector]: BuchiAutomizer initialized [2023-11-19 08:03:50,986 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2023-11-19 08:03:50,986 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 19.11 08:03:37" (1/3) ... [2023-11-19 08:03:50,987 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@4bd229a9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 19.11 08:03:50, skipping insertion in model container [2023-11-19 08:03:50,988 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2023-11-19 08:03:50,988 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 08:03:39" (2/3) ... [2023-11-19 08:03:50,991 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@4bd229a9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 19.11 08:03:50, skipping insertion in model container [2023-11-19 08:03:50,991 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2023-11-19 08:03:50,992 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 08:03:50" (3/3) ... [2023-11-19 08:03:50,993 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec14_product19.cil.c [2023-11-19 08:03:51,192 INFO L303 stractBuchiCegarLoop]: Interprodecural is true [2023-11-19 08:03:51,192 INFO L304 stractBuchiCegarLoop]: Hoare is false [2023-11-19 08:03:51,193 INFO L305 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2023-11-19 08:03:51,193 INFO L306 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2023-11-19 08:03:51,194 INFO L307 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2023-11-19 08:03:51,194 INFO L308 stractBuchiCegarLoop]: Difference is false [2023-11-19 08:03:51,195 INFO L309 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2023-11-19 08:03:51,195 INFO L313 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2023-11-19 08:03:51,235 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6041 states, 6040 states have (on average 1.8655629139072847) internal successors, (11268), 6040 states have internal predecessors, (11268), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 08:03:51,454 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1224 [2023-11-19 08:03:51,454 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-19 08:03:51,454 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-19 08:03:51,485 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 08:03:51,485 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 08:03:51,485 INFO L335 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2023-11-19 08:03:51,506 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6041 states, 6040 states have (on average 1.8655629139072847) internal successors, (11268), 6040 states have internal predecessors, (11268), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 08:03:51,623 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1224 [2023-11-19 08:03:51,623 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-19 08:03:51,624 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-19 08:03:51,640 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 08:03:51,640 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 08:03:51,666 INFO L748 eck$LassoCheckResult]: Stem: 204#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 5909#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 4170#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 3710#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 845#valid_product_returnLabel#1true main_#t~ret130#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 3012#L2606true assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 1974#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 375#L2188true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 3235#getOrigin_returnLabel#1true bigMacCall_#t~ret123#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3628#L2973true assume 0 == initPersonOnFloor_~floor#1; 2482#L2974true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1597#L3081-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2963#L2765true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 4323#L2777-2true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1230#initPersonOnFloor_returnLabel#1true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 512#bigMacCall_returnLabel#1true havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3561#L2702true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3108#isFloorCalling_returnLabel#1true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5131#isExecutiveFloorCalling_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 379#L962true assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4344#getCurrentFloorID_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 4#L966true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 298#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1395#L1115true assume !(0 != timeShift_~tmp___9~2#1); 1327#L1206true assume !(1 == ~doorState~0); 600#L1206-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5187#L2702-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3512#isFloorCalling_returnLabel#4true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1198#isExecutiveFloorCalling_returnLabel#2true stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 3531#L845true assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4715#getCurrentFloorID_returnLabel#2true stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 2107#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 5421#L1214true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2734#L902true assume !(1 == ~currentHeading~0); 2593#L912true assume !(0 == ~currentFloorID~0); 5202#L912-2true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1524#L918-1true havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 2627#L1223-2true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4575#L2702-25true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4314#isFloorCalling_returnLabel#26true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1835#isExecutiveFloorCalling_returnLabel#4true __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 4351#L1697true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 3429#L1697-1true havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 5539#timeShift_returnLabel#1true havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1525#L2702-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4421#isFloorCalling_returnLabel#27true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 140#isExecutiveFloorCalling_returnLabel#5true stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1291#L962-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1319#getCurrentFloorID_returnLabel#5true stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 3627#L966-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 2589#stopRequestedAtCurrentFloor_returnLabel#2true timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 2306#L1115-2true assume !(0 != timeShift_~tmp___9~2#1); 5772#L1206-3true assume 1 == ~doorState~0;~doorState~0 := 0; 2731#L1206-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5062#L2702-29true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 518#isFloorCalling_returnLabel#30true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 313#isExecutiveFloorCalling_returnLabel#6true stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 2242#L845-2true assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1281#getCurrentFloorID_returnLabel#6true stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 1441#stopRequestedInDirection_returnLabel#3true timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 2238#L1214-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 4488#L902-3true assume !(1 == ~currentHeading~0); 3541#L912-9true assume !(0 == ~currentFloorID~0); 2464#L912-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1018#L918-7true havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 2602#L1223-5true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 1857#L2702-51true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4670#isFloorCalling_returnLabel#52true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2183#isExecutiveFloorCalling_returnLabel#8true __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 921#L1697-2true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1954#L1697-3true havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 2549#timeShift_returnLabel#2true havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 976#L2702-52true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2894#isFloorCalling_returnLabel#53true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3583#isExecutiveFloorCalling_returnLabel#9true stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 4159#L962-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1566#getCurrentFloorID_returnLabel#9true stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 2829#L966-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 786#stopRequestedAtCurrentFloor_returnLabel#3true timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 935#L1115-4true assume !(0 != timeShift_~tmp___9~2#1); 1942#L1206-6true assume 1 == ~doorState~0;~doorState~0 := 0; 3532#L1206-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 69#L2702-55true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3153#isFloorCalling_returnLabel#56true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 864#isExecutiveFloorCalling_returnLabel#10true stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 2101#L845-4true assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 5893#getCurrentFloorID_returnLabel#10true stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 2525#stopRequestedInDirection_returnLabel#5true timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 5231#L1214-4true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 4614#L902-6true assume !(1 == ~currentHeading~0); 1758#L912-18true assume !(0 == ~currentFloorID~0); 4971#L912-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1008#L918-13true havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1401#L1223-8true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5190#L2702-77true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5532#isFloorCalling_returnLabel#78true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3559#isExecutiveFloorCalling_returnLabel#12true __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 5888#L1697-4true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 1816#L1697-5true havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 353#timeShift_returnLabel#3true havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 64#threeTS_returnLabel#1true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 4404#L2188-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 476#getOrigin_returnLabel#2true bobCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5444#L2973-1true assume 0 == initPersonOnFloor_~floor#1; 1162#L2974-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2622#L3081-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 3962#L2765-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1628#L2777-5true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 4275#initPersonOnFloor_returnLabel#2true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 3565#bobCall_returnLabel#1true havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5559#L2702-78true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 1174#isFloorCalling_returnLabel#79true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5214#isExecutiveFloorCalling_returnLabel#13true stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 1112#L962-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4968#getCurrentFloorID_returnLabel#13true stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1907#L966-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 4527#stopRequestedAtCurrentFloor_returnLabel#4true timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1910#L1115-6true assume !(0 != timeShift_~tmp___9~2#1); 2061#L1206-9true assume !(1 == ~doorState~0); 5284#L1206-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 270#L2702-81true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 3825#isFloorCalling_returnLabel#82true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2739#isExecutiveFloorCalling_returnLabel#14true stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 5149#L845-6true assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2740#getCurrentFloorID_returnLabel#14true stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 2380#stopRequestedInDirection_returnLabel#7true timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 1013#L1214-6true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2483#L902-9true assume !(1 == ~currentHeading~0); 503#L912-27true assume !(0 == ~currentFloorID~0); 4579#L912-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5143#L918-19true havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 656#L1223-11true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4771#L2702-103true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2835#isFloorCalling_returnLabel#104true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5756#isExecutiveFloorCalling_returnLabel#16true __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 1306#L1697-6true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 694#L1697-7true havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 5471#timeShift_returnLabel#4true havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 788#L2415-2true [2023-11-19 08:03:51,667 INFO L750 eck$LassoCheckResult]: Loop: 788#L2415-2true assume !false; 1748#L2416true cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 3434#L2419true assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 4158#isBlocked_returnLabel#1true cleanup_#t~ret124#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 250#L2423true assume 1 != cleanup_~tmp___0~11#1; 3688#L2423-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 5210#L2702-104true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 2640#isFloorCalling_returnLabel#105true anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 3353#L401true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 168#anyStopRequested_returnLabel#1true isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1388#isIdle_returnLabel#1true cleanup_#t~ret125#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 2038#L2435true assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 2999#L2702-109true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4260#isFloorCalling_returnLabel#110true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 561#isExecutiveFloorCalling_returnLabel#17true stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 5299#L962-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2401#getCurrentFloorID_returnLabel#17true stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 1225#L966-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1451#stopRequestedAtCurrentFloor_returnLabel#5true timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 3396#L1115-8true assume !(0 != timeShift_~tmp___9~2#1); 4765#L1206-12true assume 1 == ~doorState~0;~doorState~0 := 0; 3043#L1206-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 4354#L2702-112true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 5372#isFloorCalling_returnLabel#113true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4863#isExecutiveFloorCalling_returnLabel#18true stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 906#L845-8true assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 3954#getCurrentFloorID_returnLabel#18true stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 5263#stopRequestedInDirection_returnLabel#9true timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 3590#L1214-8true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 2652#L902-12true assume !(1 == ~currentHeading~0); 116#L912-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1521#L912-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5876#L918-25true havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 3470#L1223-14true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 3774#L2702-134true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 4642#isFloorCalling_returnLabel#135true isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 931#isExecutiveFloorCalling_returnLabel#20true __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 3217#L1697-8true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 5123#L1697-9true havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 3644#timeShift_returnLabel#5true havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 788#L2415-2true [2023-11-19 08:03:51,674 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 08:03:51,675 INFO L85 PathProgramCache]: Analyzing trace with hash -702229280, now seen corresponding path program 1 times [2023-11-19 08:03:51,686 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 08:03:51,687 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1159498424] [2023-11-19 08:03:51,687 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 08:03:51,688 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 08:03:51,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:03:52,447 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 08:03:52,448 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 08:03:52,448 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1159498424] [2023-11-19 08:03:52,449 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1159498424] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 08:03:52,449 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 08:03:52,449 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-19 08:03:52,451 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1609175078] [2023-11-19 08:03:52,451 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 08:03:52,457 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-19 08:03:52,458 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 08:03:52,458 INFO L85 PathProgramCache]: Analyzing trace with hash -291259635, now seen corresponding path program 1 times [2023-11-19 08:03:52,459 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 08:03:52,459 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [766405214] [2023-11-19 08:03:52,459 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 08:03:52,459 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 08:03:52,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:03:52,669 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 08:03:52,669 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 08:03:52,670 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [766405214] [2023-11-19 08:03:52,670 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [766405214] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 08:03:52,670 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 08:03:52,671 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-19 08:03:52,671 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1044015568] [2023-11-19 08:03:52,671 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 08:03:52,689 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-19 08:03:52,690 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 08:03:52,750 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-19 08:03:52,751 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-19 08:03:52,773 INFO L87 Difference]: Start difference. First operand has 6041 states, 6040 states have (on average 1.8655629139072847) internal successors, (11268), 6040 states have internal predecessors, (11268), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 7 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 08:04:01,690 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 08:04:01,691 INFO L93 Difference]: Finished difference Result 24165 states and 44633 transitions. [2023-11-19 08:04:01,692 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24165 states and 44633 transitions. [2023-11-19 08:04:01,948 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 4937 [2023-11-19 08:04:02,347 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24165 states to 24122 states and 44581 transitions. [2023-11-19 08:04:02,348 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24122 [2023-11-19 08:04:02,385 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24122 [2023-11-19 08:04:02,386 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24122 states and 44581 transitions. [2023-11-19 08:04:02,449 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2023-11-19 08:04:02,449 INFO L218 hiAutomatonCegarLoop]: Abstraction has 24122 states and 44581 transitions. [2023-11-19 08:04:02,507 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24122 states and 44581 transitions. [2023-11-19 08:04:03,003 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24122 to 17456. [2023-11-19 08:04:03,045 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17456 states, 17456 states have (on average 1.8582149404216315) internal successors, (32437), 17455 states have internal predecessors, (32437), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 08:04:03,110 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17456 states to 17456 states and 32437 transitions. [2023-11-19 08:04:03,111 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17456 states and 32437 transitions. [2023-11-19 08:04:03,114 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2023-11-19 08:04:03,118 INFO L428 stractBuchiCegarLoop]: Abstraction has 17456 states and 32437 transitions. [2023-11-19 08:04:03,118 INFO L335 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2023-11-19 08:04:03,118 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17456 states and 32437 transitions. [2023-11-19 08:04:03,217 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3564 [2023-11-19 08:04:03,217 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-19 08:04:03,217 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-19 08:04:03,222 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 08:04:03,222 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 08:04:03,223 INFO L748 eck$LassoCheckResult]: Stem: 30767#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 30768#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 35936#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 35612#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 32087#valid_product_returnLabel#1 main_#t~ret130#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 32088#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 33877#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 31156#L2188 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 31157#getOrigin_returnLabel#1 bigMacCall_#t~ret123#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 35232#L2973 assume 0 == initPersonOnFloor_~floor#1; 34481#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 30497#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 33342#L2765 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 32107#L2777-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 32747#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 31443#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 31444#L2702 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 35117#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 35118#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 31166#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 31167#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 30250#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 30252#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 46987#L1115 assume !(0 != timeShift_~tmp___9~2#1); 46988#L1206 assume !(1 == ~doorState~0); 47340#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 47339#L2702-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 47338#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 47337#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 47335#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 36215#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 32524#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 34037#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 34764#L902 assume !(1 == ~currentHeading~0); 34618#L912 assume !(0 == ~currentFloorID~0); 33634#L912-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 33230#L918-1 havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 33231#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 41780#L2702-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 36551#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 41430#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 41396#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 41006#L1697-1 havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 41005#timeShift_returnLabel#1 havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 41004#L2702-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 36540#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 41003#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 39719#L962-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 39718#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 39716#L966-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 35548#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 45630#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 45631#L1206-3 assume 1 == ~doorState~0;~doorState~0 := 0; 47253#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 47252#L2702-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 47251#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 47250#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 34199#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 34200#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 47249#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 47248#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 36109#L902-3 assume !(1 == ~currentHeading~0); 35472#L912-9 assume !(0 == ~currentFloorID~0); 33696#L912-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 32387#L918-7 havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 32388#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 44894#L2702-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 36554#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 44893#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 44886#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 44885#L1697-3 havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 44883#timeShift_returnLabel#2 havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 44878#L2702-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 36538#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 44877#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 44675#L962-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 44674#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 44673#L966-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 31983#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 31984#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 32249#L1206-6 assume 1 == ~doorState~0;~doorState~0 := 0; 47302#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 47301#L2702-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 47300#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 47299#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 47297#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 36513#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 31577#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 34539#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 36177#L902-6 assume !(1 == ~currentHeading~0); 33565#L912-18 assume !(0 == ~currentFloorID~0); 33566#L912-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 32367#L918-13 havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 31893#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 44571#L2702-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 36536#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 44570#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 44564#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 44563#L1697-5 havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 44562#timeShift_returnLabel#3 havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 44561#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 44560#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 44554#getOrigin_returnLabel#2 bobCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 44553#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 44535#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 44518#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 44515#L2765-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 44512#L2777-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 43928#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 43927#bobCall_returnLabel#1 havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 43922#L2702-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 36533#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 41826#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 36574#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 36562#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 36556#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 33767#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 43151#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 43152#L1206-9 assume !(1 == ~doorState~0); 47412#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 47411#L2702-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 47410#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 47409#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 47408#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 34771#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 34360#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 32375#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 32377#L902-9 assume !(1 == ~currentHeading~0); 31426#L912-27 assume !(0 == ~currentFloorID~0); 31427#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 36163#L918-19 havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 31724#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 31725#L2702-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 34864#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 34865#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 32871#L1697-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 31223#L1697-7 havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 31801#timeShift_returnLabel#4 havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 31987#L2415-2 [2023-11-19 08:04:03,227 INFO L750 eck$LassoCheckResult]: Loop: 31987#L2415-2 assume !false; 31988#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 33554#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 35397#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 30874#L2423 assume 1 != cleanup_~tmp___0~11#1; 30875#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 35592#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 34673#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 34674#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 30687#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 30688#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 33016#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 33954#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 35015#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 31534#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 31535#L962-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 36397#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 39712#L966-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 32734#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 43487#L1115-8 assume !(0 != timeShift_~tmp___9~2#1); 43488#L1206-12 assume 1 == ~doorState~0;~doorState~0 := 0; 47206#L1206-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 47205#L2702-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 47204#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 47203#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 47201#L845-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 35788#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 35789#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 35518#L1214-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 34687#L902-12 assume !(1 == ~currentHeading~0); 30559#L912-36 assume !(0 == ~currentFloorID~0); 30560#L912-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 33227#L918-25 havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 30887#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 35422#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 35656#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 32240#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 32241#L1697-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 33448#L1697-9 havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 35558#timeShift_returnLabel#5 havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 31987#L2415-2 [2023-11-19 08:04:03,227 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 08:04:03,228 INFO L85 PathProgramCache]: Analyzing trace with hash -702229280, now seen corresponding path program 2 times [2023-11-19 08:04:03,228 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 08:04:03,229 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2109911929] [2023-11-19 08:04:03,229 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 08:04:03,229 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 08:04:03,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:04:03,437 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 08:04:03,437 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 08:04:03,437 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2109911929] [2023-11-19 08:04:03,438 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2109911929] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 08:04:03,438 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 08:04:03,438 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-19 08:04:03,439 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [271634930] [2023-11-19 08:04:03,439 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 08:04:03,441 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-19 08:04:03,442 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 08:04:03,442 INFO L85 PathProgramCache]: Analyzing trace with hash -684286645, now seen corresponding path program 1 times [2023-11-19 08:04:03,442 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 08:04:03,443 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [752342217] [2023-11-19 08:04:03,444 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 08:04:03,445 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 08:04:03,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:04:03,504 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 08:04:03,504 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 08:04:03,505 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [752342217] [2023-11-19 08:04:03,505 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [752342217] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 08:04:03,506 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 08:04:03,507 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-19 08:04:03,507 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [391916943] [2023-11-19 08:04:03,508 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 08:04:03,509 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-19 08:04:03,509 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 08:04:03,510 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-19 08:04:03,510 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-19 08:04:03,511 INFO L87 Difference]: Start difference. First operand 17456 states and 32437 transitions. cyclomatic complexity: 14983 Second operand has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 3 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 08:04:04,301 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 08:04:04,301 INFO L93 Difference]: Finished difference Result 31358 states and 58220 transitions. [2023-11-19 08:04:04,301 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31358 states and 58220 transitions. [2023-11-19 08:04:04,500 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7100 [2023-11-19 08:04:04,886 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31358 states to 31358 states and 58220 transitions. [2023-11-19 08:04:04,887 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31358 [2023-11-19 08:04:04,938 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31358 [2023-11-19 08:04:04,938 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31358 states and 58220 transitions. [2023-11-19 08:04:04,978 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2023-11-19 08:04:04,978 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31358 states and 58220 transitions. [2023-11-19 08:04:05,026 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31358 states and 58220 transitions. [2023-11-19 08:04:05,603 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31358 to 31326. [2023-11-19 08:04:05,668 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31326 states, 31326 states have (on average 1.8569878056566431) internal successors, (58172), 31325 states have internal predecessors, (58172), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 08:04:05,958 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31326 states to 31326 states and 58172 transitions. [2023-11-19 08:04:05,959 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31326 states and 58172 transitions. [2023-11-19 08:04:05,959 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-19 08:04:05,960 INFO L428 stractBuchiCegarLoop]: Abstraction has 31326 states and 58172 transitions. [2023-11-19 08:04:05,961 INFO L335 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2023-11-19 08:04:05,961 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31326 states and 58172 transitions. [2023-11-19 08:04:06,173 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7092 [2023-11-19 08:04:06,174 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-19 08:04:06,174 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-19 08:04:06,179 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 08:04:06,179 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 08:04:06,182 INFO L748 eck$LassoCheckResult]: Stem: 79590#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 79591#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 84871#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 84546#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 80915#valid_product_returnLabel#1 main_#t~ret130#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 80916#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 82737#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 79977#L2188 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 79978#getOrigin_returnLabel#1 bigMacCall_#t~ret123#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 84149#L2973 assume 0 == initPersonOnFloor_~floor#1; 83365#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 79321#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 82193#L2765 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 80935#L2777-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 81584#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 80270#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 80271#L2702 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 84031#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 84032#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 79987#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 79988#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 79071#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 79073#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 79807#L1115 assume !(0 != timeShift_~tmp___9~2#1); 81863#L1206 assume !(1 == ~doorState~0); 89734#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 85351#L2702-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 84385#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 81525#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 81526#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 84394#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 81357#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 82902#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 83666#L902 assume !(1 == ~currentHeading~0); 83509#L912 assume !(0 == ~currentFloorID~0); 82491#L912-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 82072#L918-1 havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 82073#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 90736#L2702-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 88663#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 89528#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 89521#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 89513#L1697-1 havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 89511#timeShift_returnLabel#1 havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 89509#L2702-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 88647#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 89507#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 89500#L962-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 89498#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 89496#L966-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 83505#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 83147#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 83149#L1206-3 assume 1 == ~doorState~0;~doorState~0 := 0; 83663#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 83664#L2702-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 80284#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 79839#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 79840#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 81662#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 81663#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 95230#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 95231#L902-3 assume !(1 == ~currentHeading~0); 87565#L912-9 assume !(0 == ~currentFloorID~0); 82553#L912-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 83345#L918-7 havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 102709#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 88083#L2702-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 88081#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 88080#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 88070#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 88068#L1697-3 havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 88067#timeShift_returnLabel#2 havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 88066#L2702-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 85645#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 88065#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 88063#L962-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 88064#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 88085#L966-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 80815#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 80816#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 81077#L1206-6 assume 1 == ~doorState~0;~doorState~0 := 0; 82687#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 79253#L2702-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 79254#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 80947#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 80948#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 82896#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 80408#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 83427#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 85366#L902-6 assume !(1 == ~currentHeading~0); 82417#L912-18 assume !(0 == ~currentFloorID~0); 82418#L912-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 81196#L918-13 havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 80725#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 94952#L2702-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 85637#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 94951#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 94945#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 94944#L1697-5 havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 94943#timeShift_returnLabel#3 havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 94942#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 94941#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 94935#getOrigin_returnLabel#2 bobCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 94933#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 94918#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 94901#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 94898#L2765-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 94895#L2777-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 94890#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 94888#bobCall_returnLabel#1 havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 94856#L2702-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 94839#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 94854#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 94851#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 94853#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 102952#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 82626#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 82630#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 82631#L1206-9 assume !(1 == ~doorState~0); 107888#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 107887#L2702-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 107886#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 107885#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 107884#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 83673#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 83674#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 108024#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 83367#L902-9 assume !(1 == ~currentHeading~0); 80250#L912-27 assume !(0 == ~currentFloorID~0); 80251#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 85103#L918-19 havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 80975#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 103928#L2702-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 96046#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 103926#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 103924#L1697-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 103916#L1697-7 havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 103914#timeShift_returnLabel#4 havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 103912#L2415-2 [2023-11-19 08:04:06,184 INFO L750 eck$LassoCheckResult]: Loop: 103912#L2415-2 assume !false; 103911#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 103910#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 103909#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 103908#L2423 assume 1 != cleanup_~tmp___0~11#1; 103907#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 103902#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 103900#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 103884#L401 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 103875#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 103874#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 103873#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 103872#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 95976#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 103871#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 103870#L962-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 97904#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 97225#L966-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 97224#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 97221#L1115-8 assume !(0 != timeShift_~tmp___9~2#1); 97220#L1206-12 assume 1 == ~doorState~0;~doorState~0 := 0; 97219#L1206-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 97218#L2702-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 97217#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 97216#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 97210#L845-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 97086#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 97085#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 97083#L1214-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 83578#L902-12 assume !(1 == ~currentHeading~0); 79377#L912-36 assume !(0 == ~currentFloorID~0); 79378#L912-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 82065#L918-25 havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 79707#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 104819#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 85657#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 104818#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 104815#L1697-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 104811#L1697-9 havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 103913#timeShift_returnLabel#5 havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 103912#L2415-2 [2023-11-19 08:04:06,187 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 08:04:06,187 INFO L85 PathProgramCache]: Analyzing trace with hash 1559343970, now seen corresponding path program 1 times [2023-11-19 08:04:06,187 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 08:04:06,188 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [234635583] [2023-11-19 08:04:06,188 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 08:04:06,188 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 08:04:06,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:04:06,341 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 08:04:06,341 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 08:04:06,341 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [234635583] [2023-11-19 08:04:06,342 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [234635583] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 08:04:06,342 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 08:04:06,342 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-19 08:04:06,342 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [172069604] [2023-11-19 08:04:06,342 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 08:04:06,343 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-19 08:04:06,343 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 08:04:06,344 INFO L85 PathProgramCache]: Analyzing trace with hash -4228275, now seen corresponding path program 1 times [2023-11-19 08:04:06,344 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 08:04:06,344 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1249939607] [2023-11-19 08:04:06,344 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 08:04:06,345 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 08:04:06,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:04:06,453 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 08:04:06,454 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 08:04:06,454 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1249939607] [2023-11-19 08:04:06,454 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1249939607] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 08:04:06,455 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 08:04:06,455 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-19 08:04:06,455 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [314667011] [2023-11-19 08:04:06,455 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 08:04:06,456 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-19 08:04:06,456 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 08:04:06,456 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-19 08:04:06,457 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2023-11-19 08:04:06,457 INFO L87 Difference]: Start difference. First operand 31326 states and 58172 transitions. cyclomatic complexity: 26848 Second operand has 8 states, 8 states have (on average 5.0) internal successors, (40), 8 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 08:04:12,690 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 08:04:12,691 INFO L93 Difference]: Finished difference Result 138813 states and 258736 transitions. [2023-11-19 08:04:12,691 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 138813 states and 258736 transitions. [2023-11-19 08:04:13,901 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 31922 [2023-11-19 08:04:14,658 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 138813 states to 138813 states and 258736 transitions. [2023-11-19 08:04:14,658 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 138813 [2023-11-19 08:04:14,766 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 138813 [2023-11-19 08:04:14,766 INFO L73 IsDeterministic]: Start isDeterministic. Operand 138813 states and 258736 transitions. [2023-11-19 08:04:14,941 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2023-11-19 08:04:14,941 INFO L218 hiAutomatonCegarLoop]: Abstraction has 138813 states and 258736 transitions. [2023-11-19 08:04:15,070 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 138813 states and 258736 transitions. [2023-11-19 08:04:16,629 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 138813 to 62473. [2023-11-19 08:04:16,693 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 62473 states, 62473 states have (on average 1.8565140140540715) internal successors, (115982), 62472 states have internal predecessors, (115982), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 08:04:16,867 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62473 states to 62473 states and 115982 transitions. [2023-11-19 08:04:16,867 INFO L240 hiAutomatonCegarLoop]: Abstraction has 62473 states and 115982 transitions. [2023-11-19 08:04:16,872 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2023-11-19 08:04:16,874 INFO L428 stractBuchiCegarLoop]: Abstraction has 62473 states and 115982 transitions. [2023-11-19 08:04:16,874 INFO L335 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2023-11-19 08:04:16,874 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 62473 states and 115982 transitions. [2023-11-19 08:04:17,064 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 14060 [2023-11-19 08:04:17,065 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-19 08:04:17,065 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-19 08:04:17,071 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 08:04:17,071 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 08:04:17,072 INFO L748 eck$LassoCheckResult]: Stem: 249764#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 249765#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret130#1, main_~retValue_acc~26#1, main_~tmp~26#1;havoc main_~retValue_acc~26#1;havoc main_~tmp~26#1;assume { :begin_inline_select_helpers } true; 255120#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 254763#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;havoc valid_product_~retValue_acc~21#1;valid_product_~retValue_acc~21#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~21#1; 251096#valid_product_returnLabel#1 main_#t~ret130#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~21#1;assume { :end_inline_valid_product } true;main_~tmp~26#1 := main_#t~ret130#1;havoc main_#t~ret130#1; 251097#L2606 assume 0 != main_~tmp~26#1;assume { :begin_inline_setup } true; 252940#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;havoc bigMacCall_~tmp~23#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 250157#L2188 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 250158#getOrigin_returnLabel#1 bigMacCall_#t~ret123#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23#1 := bigMacCall_#t~ret123#1;havoc bigMacCall_#t~ret123#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~23#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 254368#L2973 assume 0 == initPersonOnFloor_~floor#1; 253562#L2974 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 249493#L3081-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 252380#L2765 assume !(0 == callOnFloor_~floorID#1); 254100#L2768 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 251116#L2777-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 251769#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 250449#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret123#1, bigMacCall_~tmp~23#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 250450#L2702 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 254243#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 254244#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 250167#L962 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 250168#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 249246#L966 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 249248#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 257789#L1115 assume !(0 != timeShift_~tmp___9~2#1); 257790#L1206 assume !(1 == ~doorState~0); 250625#L1206-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 250626#L2702-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 254599#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 254600#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 254609#L845 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 254610#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 251535#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 253103#L1214 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 265519#L902 assume !(1 == ~currentHeading~0); 253706#L912 assume !(0 == ~currentFloorID~0); 252687#L912-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 255644#L918-1 havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 253746#L1223-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 253747#L2702-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 255223#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 255224#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 255243#L1697 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 250551#L1697-1 havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 254534#timeShift_returnLabel#1 havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 252264#L2702-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 252265#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 256344#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 256345#L962-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 256340#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 256341#L966-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 266413#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 266411#L1115-2 assume !(0 != timeShift_~tmp___9~2#1); 266409#L1206-3 assume 1 == ~doorState~0;~doorState~0 := 0; 253858#L1206-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 253859#L2702-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 266393#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 250018#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 250019#L845-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 266348#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 266347#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 266285#L1214-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 266287#L902-3 assume !(1 == ~currentHeading~0); 254619#L912-9 assume !(0 == ~currentFloorID~0); 253544#L912-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 251396#L918-7 havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 251397#L1223-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 253715#L2702-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 268008#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 268009#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 267733#L1697-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 259149#L1697-3 havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 259150#timeShift_returnLabel#2 havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 259138#L2702-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 259139#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 254659#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 254660#L962-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 294251#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 266272#L966-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 266274#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 294580#L1115-4 assume !(0 != timeShift_~tmp___9~2#1); 294561#L1206-6 assume 1 == ~doorState~0;~doorState~0 := 0; 294473#L1206-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 249428#L2702-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 249429#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 251128#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 251129#L845-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 294471#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 294460#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 294434#L1214-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 294404#L902-6 assume !(1 == ~currentHeading~0); 258027#L912-18 assume !(0 == ~currentFloorID~0); 254592#L912-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 293446#L918-13 havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 289987#L1223-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 266896#L2702-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 266897#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 289986#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 266279#L1697-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 252700#L1697-5 havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 252701#timeShift_returnLabel#3 havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 258099#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;havoc bobCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~23#1; 258100#L2188-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~23#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~23#1; 289955#getOrigin_returnLabel#2 bobCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~23#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~18#1 := bobCall_#t~ret118#1;havoc bobCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 289954#L2973-1 assume 0 == initPersonOnFloor_~floor#1; 289162#L2974-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 289146#L3081-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 289142#L2765-2 assume !(0 == callOnFloor_~floorID#1); 289140#L2768-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 289137#L2777-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 289136#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 256334#bobCall_returnLabel#1 havoc bobCall_#t~ret118#1, bobCall_~tmp~18#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret124#1, cleanup_#t~ret125#1, cleanup_~i~3#1, cleanup_~tmp~24#1, cleanup_~tmp___0~11#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~24#1;havoc cleanup_~tmp___0~11#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 256333#L2702-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 255952#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 256332#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 256330#L962-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 256329#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 256326#L966-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 256328#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 293875#L1115-6 assume !(0 != timeShift_~tmp___9~2#1); 293874#L1206-9 assume !(1 == ~doorState~0); 293873#L1206-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 293872#L2702-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 254849#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 253867#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 253868#L845-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 253869#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 253436#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 251384#L1214-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 251386#L902-9 assume !(1 == ~currentHeading~0); 250431#L912-27 assume !(0 == ~currentFloorID~0); 250432#L912-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 255626#L918-19 havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 251156#L1223-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 283020#L2702-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 277762#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 283019#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 283016#L1697-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 280292#L1697-7 havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 255752#timeShift_returnLabel#4 havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 250998#L2415-2 [2023-11-19 08:04:17,073 INFO L750 eck$LassoCheckResult]: Loop: 250998#L2415-2 assume !false; 250999#L2416 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 280289#L2419 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 255110#isBlocked_returnLabel#1 cleanup_#t~ret124#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11#1 := cleanup_#t~ret124#1;havoc cleanup_#t~ret124#1; 255111#L2423 assume 1 != cleanup_~tmp___0~11#1; 254744#L2423-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~3#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~2#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 254745#L2702-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 273174#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret6#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret6#1;havoc anyStopRequested_#t~ret6#1; 282028#L401 assume !(0 != anyStopRequested_~tmp___3~0#1); 282029#L405 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 293433#anyStopRequested_returnLabel#1 isIdle_#t~ret11#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~2#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3#1 := isIdle_#t~ret11#1;havoc isIdle_#t~ret11#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~3#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 273164#isIdle_returnLabel#1 cleanup_#t~ret125#1 := isIdle_#res#1;havoc isIdle_#t~ret11#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~3#1;assume { :end_inline_isIdle } true;cleanup_~tmp~24#1 := cleanup_#t~ret125#1;havoc cleanup_#t~ret125#1; 268031#L2435 assume !(0 != cleanup_~tmp~24#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 268032#L2702-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 268028#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 268029#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret29#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret29#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1; 255679#L962-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 255680#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret30#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 266265#L966-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 251756#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret45#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret29#1, stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 252146#L1115-8 assume !(0 != timeShift_~tmp___9~2#1); 254500#L1206-12 assume 1 == ~doorState~0;~doorState~0 := 0; 254178#L1206-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~5#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 254179#L2702-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 255715#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 255716#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret23#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret23#1;havoc stopRequestedInDirection_#t~ret23#1; 251200#L845-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 251201#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret24#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~5#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 255667#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret52#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~5#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret52#1;havoc timeShift_#t~ret52#1; 254665#L1214-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~6#1;~currentHeading~0 := continueInDirection_~dir#1; 253780#L902-12 assume !(1 == ~currentHeading~0); 249555#L912-36 assume !(0 == ~currentFloorID~0); 249556#L912-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 252259#L918-25 havoc continueInDirection_#t~ret26#1, continueInDirection_~dir#1, continueInDirection_~tmp~6#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 283001#L1223-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification14_spec__1_~tmp~14#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~27#1; 254813#L2702-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~27#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~27#1; 254814#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret82#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~27#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret82#1;havoc isExecutiveFloorCalling_#t~ret82#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 251248#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret89#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret82#1, isExecutiveFloorCalling_~retValue_acc~15#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5#1 := __utac_acc__Specification14_spec__1_#t~ret89#1;havoc __utac_acc__Specification14_spec__1_#t~ret89#1; 251249#L1697-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5#1); 280291#L1697-9 havoc __utac_acc__Specification14_spec__1_#t~ret89#1, __utac_acc__Specification14_spec__1_#t~ret90#1, __utac_acc__Specification14_spec__1_#t~ret91#1, __utac_acc__Specification14_spec__1_#t~ret92#1, __utac_acc__Specification14_spec__1_~tmp~14#1, __utac_acc__Specification14_spec__1_~tmp___0~10#1, __utac_acc__Specification14_spec__1_~tmp___1~7#1, __utac_acc__Specification14_spec__1_~tmp___2~5#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 254711#timeShift_returnLabel#5 havoc timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_~tmp~10#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 250998#L2415-2 [2023-11-19 08:04:17,074 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 08:04:17,074 INFO L85 PathProgramCache]: Analyzing trace with hash -221851995, now seen corresponding path program 1 times [2023-11-19 08:04:17,074 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 08:04:17,074 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [860267375] [2023-11-19 08:04:17,074 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 08:04:17,075 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 08:04:17,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:04:17,208 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 08:04:17,209 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 08:04:17,210 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [860267375] [2023-11-19 08:04:17,210 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [860267375] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 08:04:17,211 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 08:04:17,211 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-19 08:04:17,212 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [187551606] [2023-11-19 08:04:17,212 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 08:04:17,212 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-19 08:04:17,213 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 08:04:17,213 INFO L85 PathProgramCache]: Analyzing trace with hash 1486588185, now seen corresponding path program 1 times [2023-11-19 08:04:17,213 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 08:04:17,217 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [339901314] [2023-11-19 08:04:17,218 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 08:04:17,218 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 08:04:17,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 08:04:17,323 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 08:04:17,324 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 08:04:17,324 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [339901314] [2023-11-19 08:04:17,324 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [339901314] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 08:04:17,324 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 08:04:17,325 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-19 08:04:17,325 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [317730265] [2023-11-19 08:04:17,325 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 08:04:17,325 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-19 08:04:17,325 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 08:04:17,326 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-19 08:04:17,326 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2023-11-19 08:04:17,326 INFO L87 Difference]: Start difference. First operand 62473 states and 115982 transitions. cyclomatic complexity: 53511 Second operand has 8 states, 8 states have (on average 5.125) internal successors, (41), 8 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)